#logstash

prabhu1909: there is no way I know of to make logstash pause sending data to kafka

you can play with the timestamps in logstash

yybel: Hey, so I went the route of using multiple jmx {} inputs, and that works, but for some reason it mixes them together in the output... this my config: http://paste.cinaed.be/?8ffde088a2beba44#7Mx/bm...

<http://tinyurl.com/gvmcdb2>; (at paste.cinaed.be)

so in influxdb, there is stuff tagged with the name of one App, that has data from the other app etc

seems very random, because there are correct ones too

so... I have two jmx inputs in my config, and it seems that logstash puts them together as one event... I don't want that, because of the way my output plugin works. How do I keep those seperated?

Can you get a sample of those output events to pastebin

Logstash events in json

sad

hello!

So I want logstash to stream its logs to ES. I need the ElasticSearch plugin, right?

I tried already some stuff - currently logstash only tells it opened a pipe, closed it and then exits with 0.

so apparently there is nothing set up, hence logstash will autoexit?

brahama, vali: Hi!!

bhi

anyone? :)

Hi guys, can I borrow your experience for a sec?

I succeeded in parsing an input, and it currently has the following structure {allEvents : [1, 2, 3], @timestamp : .., headers : { ...}, host : ...}. This is outputted as a single event (as a file). I want to split it in allEvents.length events, so three events, with the content of the matching index of allEvents.

How do I achieve this?

Do I need to use the Clone filter or something? Google isn't bringing up anything useful so far.

Hmm. Found it. Seems like it was the split filter (logically). Kinda missed the field key. :-) Thanks!

exit

i'm working on getting a new system's logs into logstash, but running into an issue with the sqs plugin (that's the input for these logs). I've made my config about as simple as can be and am getting an error I'm not sure how to troubleshoot: https://notehub.org/1unlm

Title: NoteHub — Config (at notehub.org)

if anyone can point out what i'm doing wrong it would be greatly appreciated.... LS 2.4.0

jlambert121: be nice if you showed what the error is

it's in the output

nm i jusr saw ir

*it

it's like it receives the message and makes it through output but doesn't ack it on the queue - just keeps receiving it over and over with that error

i;d enable debug and see what your getting

in the logs

gotta head in to the office. back later

yeah, realized I hadn't looked at that. unfortunately not very helpful to me: https://notehub.org/rr04a