请问下 现在这个还支持嘛,为什么我的设置一直都不生效。具体配置如下:
output {
elasticsearch{
hosts => ["192.168.103.3:9200","192.168.103.4:9200","192.168.103.5:9200"]
index => "appl-%{+YYYY.MM.dd}"
template => "/home/bigdata/apps/logstash/config/appl_mapping.json"
template_name => "appl-%{+YYYY.MM.dd}"
template_overwrite => true
manage_template => true
}
------------------------------------------------------------------------------------
json文件部分如下:
{
"template" : "appl-*",
"settings": {
"index": {
"index.refresh_interval" : "60s",
"number_of_shards": "5",
"number_of_replicas": "1"
}
},
"mappings": {
"doc": {
"properties": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"appname": {
"type": "string",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
output {
elasticsearch{
hosts => ["192.168.103.3:9200","192.168.103.4:9200","192.168.103.5:9200"]
index => "appl-%{+YYYY.MM.dd}"
template => "/home/bigdata/apps/logstash/config/appl_mapping.json"
template_name => "appl-%{+YYYY.MM.dd}"
template_overwrite => true
manage_template => true
}
------------------------------------------------------------------------------------
json文件部分如下:
{
"template" : "appl-*",
"settings": {
"index": {
"index.refresh_interval" : "60s",
"number_of_shards": "5",
"number_of_replicas": "1"
}
},
"mappings": {
"doc": {
"properties": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"appname": {
"type": "string",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
1 个回复
lmy
赞同来自:
“order”: 1