我已经在elasticsearch中创建了一个索引来存储一些测试日志,但是我无法从logstash中获取数据来加载。 我在 ES 中创建索引:
put sonicwall
{
"mappings":{
"properties":{
"Time": { "type":"text"},
"Category": { "type":"text"},
"Group": { "type":"text"},
"Event":{ "type":"text"},
"Priority":{ "type":"text"}
}
}
}
现在,我的 logstash 配置文件:
input{
file{
path => "C:/Elastic/logsPrueba/log3.csv"
start_position => beginning
}
}
filter{
csv{
separator => ","
columns => ["Time","Category","Group","Event","Priority"]
}
}
output{
elasticsearch{
hosts => ["localhost:9200"]
index => "sonicwall"
}
stdout {}
}
这是CSV
有人可以帮助我吗?