Hi,
I tried right now to open the documentation and use it.
The documentation I used was:
What I used from the documentation is:
filter {
mutate {
convert => { "fieldname" => "integer" }
}
}
My whole configuration to logstash is:
input {
beats {
port => 5044
}
}
filter {
mutate {
convert => { "msgSubmissionTime" => "integer" }
}
}
output {
elasticsearch {
hosts => "192.168.1.114:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
The log of the filebeat after this is:
2017-03-16T09:33:14+02:00 INFO Harvester started for file: /var/log/smsc/check.log
2017-03-16T09:33:39+02:00 INFO Non-zero metrics in the last 30s: filebeat.harvester.running=1 registar.states.current=1 filebeat.harvester.open_files=1 publish.events=1 registrar.states.update=1 registrar.writes=1 filebeat.harvester.started=1
2017-03-16T09:34:03+02:00 ERR Failed to publish events caused by: write tcp 192.168.1.114:50191->192.168.1.100:5044: write: connection reset by peer
2017-03-16T09:34:03+02:00 INFO Error publishing events (retrying): write tcp 192.168.1.114:50191->192.168.1.100:5044: write: connection reset by peer
2017-03-16T09:34:09+02:00 INFO Non-zero metrics in the last 30s: libbeat.logstash.published_but_not_acked_events=7 libbeat.logstash.publish.write_bytes=2631 libbeat.logstash.published_and_acked_events=7 libbeat.logstash.publish.write_errors=1 libbeat.logstash.call_count.PublishEvents=2 libbeat.logstash.publish.read_bytes=24 registrar.states.update=7 registrar.writes=1 libbeat.publisher.published_events=7 publish.events=7
Also in Kibana I get:
![]()
I dont understand what Im doing wrong with something that is suppose to be simple. ![]()
I will be happy for help.