logstash, elasticsearch 질문입니다.

Question

안녕하세요 elk stack 를 활용해 보고자 https://github.com/kimjmin/elastic-demo 예제를 보고있는데요막히는 부분이 있어 질문합니다.. logstash-1.5.5elasticsearch-1.7.4kibana-4.1.4위 버전을 사용중입니다. logstash 설정은 아래와같습니다.logstash.conf&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;input { file { codec &#61;> json path &#61;> &#34;/svc/elastic-demo/data/*.log&#34; }} filter{ mutate { remove_field &#61;> [ &#34;&#64;version&#34;, &#34;&#64;timestamp&#34;, &#34;host&#34;, &#34;path&#34; ] }} output{ elasticsearch{ protocol &#61;> &#34;node&#34; host &#61;> &#34;192.168.2.193&#34; port &#61;> &#34;9300&#34; cluster &#61;> &#34;es_test&#34; node_name &#61;> &#34;demo-logstash&#34; index &#61;> &#34;demo-kr-subway&#34; document_type &#61;> &#34;kr-subway&#34; }}&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;위 설정으로 실행하여도 로그가 적재되지 않습니다.input의 codec을 json_line으로 해도 마찬가지입니다.설정에 잘못된 부분이 있나 질문드립니다. logstash가 elasticsearch로 연결은 되는데 로그 적재가 되지 않는 상황입니다. elasticsearch는 standalone으로 구성하였습니다. json data 샘플입니다.&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;{&#34;time_slice&#34;:&#34;2014-01-01T05:00:00.000Z&#34;,&#34;line_num&#34;:&#34;1호선&#34;,&#34;station_name&#34;:&#34;서울역&#34;,&#34;station_code&#34;:&#34;0150&#34;,&#34;station_geo&#34;:{&#34;lat&#34;:37.554648,&#34;lon&#34;:126.972559},&#34;people_in&#34;:91,&#34;people_out&#34;:172,&#34;total&#34;:263}{&#34;time_slice&#34;:&#34;2014-01-01T06:00:00.000Z&#34;,&#34;line_num&#34;:&#34;1호선&#34;,&#34;station_name&#34;:&#34;서울역&#34;,&#34;station_code&#34;:&#34;0150&#34;,&#34;station_geo&#34;:{&#34;lat&#34;:37.554648,&#34;lon&#34;:126.972559},&#34;people_in&#34;:0,&#34;people_out&#34;:0,&#34;total&#34;:0}{&#34;time_slice&#34;:&#34;2014-01-01T07:00:00.000Z&#34;,&#34;line_num&#34;:&#34;1호선&#34;,&#34;station_name&#34;:&#34;서울역&#34;,&#34;station_code&#34;:&#34;0150&#34;,&#34;station_geo&#34;:{&#34;lat&#34;:37.554648,&#34;lon&#34;:126.972559},&#34;people_in&#34;:0,&#34;people_out&#34;:0,&#34;total&#34;:0}&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;&#61;

logstash, elasticsearch 질문입니다.

0개의 답변

Q&A 목록