elasticsearch - Logstash unable to start when I add grep filter -
i have logstash instance deployed on local , trying head wrapped around it. added simple grep filter logstash.conf file, when restart service, fails. , when remove grep statement works fine. here config. appreciated. thanks.
input { kafka { zk_connect => "localhost:9091" topic_id => "rawlog" reset_beginning => false consumer_threads => 1 consumer_restart_on_error => true consumer_restart_sleep_ms => 100 decorate_events => false } } output { elasticsearch { bind_host => "localhost" protocol => "http" } } filter { grep { match => {"message"=>"hello-world"} } }
grep{} deprecated in favor of conditionals , drop{}:
filter { if [message] !~ /hello-world/ { drop{} } }
if doesn't help, post sample of input.
Comments
Post a Comment