Use term "id“ in input plugin, but "id" is not output and not shown in Kibana


(Chao Fan) #1

Hi,

We added common option "id" in input plugin. But this option is not output and it is not shown up in Kibana. The config is as below.

input {
  udp {
	id => "my_plugin_id"
	port => 5040
	codec => "line"
	type => "MAF"
	}
}
output {
  elasticsearch { hosts => ["localhost:9200"] }
  stdout { codec => rubydebug }
}

Logstash output the flowing info not find "id".
{
"@timestamp" => 2018-01-11T06:47:04.630Z,
"message" => "(8020)2018-01-11 14:46:51.228564 [LM_INFO] Client(53290463)(IP(10.16.4.187:63383)) I/O count = 0, destory...\n\u0000",
"@version" => "1",
"type" => "MAF",
"host" => "10.16.4.187"
}

The field is not shown on Kibana either.

We want to use this option to do some filtering. Is there error for the config? If not, how can we write the config to use "id" common option?

Thanks.


(Paris Mermigkas) #2

That id option is just used as a friendly name for that specific plugin instance in the Stats API, instead of a random generated name. It is not passed inside the event.


(Chao Fan) #3

OK, got it, thanks.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.