Logstash input from Elasticsearch wrong configuration

Elastic Stack Logstash
1

I want my logstash to take data from Elasticsearch on some server. This is my logstash configuration for input from Elasticsearch

 input {
     elasticsearch{
         hosts => "127.0.0.1"
         index => "alerts-*"
         schedule => "* * * * *"
         user => 'admin'
         password => 'admin'
         query => '{ "query": {"match_all": {}} }'
         tags => "table_elastic_to_elastic"
         ssl_certificate_verification => false
         ssl => true
         size => 500
         docinfo => true
 
}}

While running pipeline from this configuration file I am getting Something is wrong with your configuration.

error logstash es
error logstash es1274×673 191 KB

I am new to ELK stack. Please let me know where i am doing wrong.

2

That is a valid option for the elasticsearch output, but not the input. Delete it.

1 Like
3

Thank you. It is working fine now.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.