NullPointerException in logstash filter throttle

Elastic Stack Logstash
1

Hi there,

I am currently trying to make the Throttle plugin work in logstash (7.2.0) but some nasty NullPointerException occurs and I can't manage to understand why from the stack trace. Any idea ?

Filter config:

filter {
  # ...

  if ![jsonQueryPlan]{
    drop{}
  }

  if ![jsonQueryPlan][Query Text] {
    drop{}
  }

  throttle {
    before_count => -1
    after_count => 1
    period => 10
    max_age => 20
    key => "%{[jsonQueryPlan][Query Text]}"
    add_tag => "throttled"
  }

  if "throttled" in [tags] {
    drop {}
  }
}

And the stack trace (the error doesn't occur right from the beginning):

Thanks for your help.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.