Use term "id“ in input plugin, but "id" is not output and not shown in Kibana

Elastic Stack Logstash
1

Hi,

We added common option "id" in input plugin. But this option is not output and it is not shown up in Kibana. The config is as below.

input {
  udp {
	id => "my_plugin_id"
	port => 5040
	codec => "line"
	type => "MAF"
	}
}
output {
  elasticsearch { hosts => ["localhost:9200"] }
  stdout { codec => rubydebug }
}

Logstash output the flowing info not find "id".
{
"@timestamp" => 2018-01-11T06:47:04.630Z,
"message" => "(8020)2018-01-11 14:46:51.228564 [LM_INFO] Client(53290463)(IP(10.16.4.187:63383)) I/O count = 0, destory...\n\u0000",
"@version" => "1",
"type" => "MAF",
"host" => "10.16.4.187"
}

The field is not shown on Kibana either.

image
image.png1575×827 38.8 KB

We want to use this option to do some filtering. Is there error for the config? If not, how can we write the config to use "id" common option?

Thanks.

1 Like
2

That id option is just used as a friendly name for that specific plugin instance in the Stats API, instead of a random generated name. It is not passed inside the event.

1 Like
3

OK, got it, thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.