带有 elasticsearch 输入循环结果的 Logstash 总是给出错误“无法解析请求正文”

Question

无论我如何调整非常基本的 logstash 配置，我都会收到此错误： Error: [400] {"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"Failed to parse request body"}],"type":"illegal_argument_exception","reason":"Failed to parse request body","caused_by":{"type":"json_parse_exception","reason":"Unrecognized token '**************': was expecting ('true', 'false' or 'null')\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@6d67a6bb; line: 1, column: 30]"}},"status":400}

即使我知道结果只有8个"hits"，它也会一遍又一遍地输出这8个结果，直到我杀掉logstash脚本，ES不断重启……一开始，我以为这是我的查询，但即使根本没有查询，我仍然收到相同的错误：

input {
     elasticsearch {
      hosts => ["***", "***", "*****"]
      index => "index_name_here"
      user => "****"
      password => "******"
     }
}
filter {
}
output {
    stdout { 
        codec => json 
    }
}

还有，我是运行Ubuntu16.04

如有任何帮助，我们将不胜感激。谢谢！

Answer 1

这已被确定为错误。详情 here.

和修复（目前正在等待审核）：https://github.com/logstash-plugins/logstash-input-elasticsearch/issues/62

带有 elasticsearch 输入循环结果的 Logstash 总是给出错误“无法解析请求正文”

Logstash with elasticsearch input loops results and always gives the error ” Failed to parse request body ”

elasticsearch

logstash

logstash-configuration