用于ElasticSearch 2.x的Rabbitmq插件

Question

我在ubuntu 14.04中安装了弹性搜索2.3.4

http://10.x.x.11:9200/

{
  "name" : "Everett Thomas",
  "cluster_name" : "elasticsearch",
  "version" : {
    "number" : "2.3.4",
    "build_hash" : "e455fd0c13dceca8dbbdbb1665d068ae55dabe3f",
    "build_timestamp" : "2016-06-30T11:24:31Z",
    "build_snapshot" : false,
    "lucene_version" : "5.5.0"
  },
  "tagline" : "You Know, for Search"
}

我在不同的系统上运行了rabbitmq服务器(10.x.x.12)。现在，我正在尝试将rabbitmq服务器与elasticsearch连接起来，以便使用队列中发布的所有消息并插入到弹性搜索中。

/etc/logstash/con.d/rabbit.conf包含

rabbitmq {
    host => "10.x.x.12"
    queue => "integration"
    durable => true
    key => "#"
    exchange => "integ"
    threads => 3
    prefetch_count => 50
    port => 5672
    user => "guest"
    password => "guest"
}

由于插件问题，logstash没有出现。

service logstash configtest
Error: Expected one of #, input, filter, output at line 1, column 1 (byte 1) after  {:level=>:error}

我相信我们需要安装弹性搜索插件。在这个网站上，我看不到弹性搜索> 2.0的插件。

有人能帮我找到apt插件吗?这样消息就会在队列中发布。

Answer 1

在rabbit.conf文件中，需要将rabbitmq输入添加到input {}部分。您还需要一个带有output{}输出的elasticsearch部分来将文档发送到您的ES服务器。

input {
  rabbitmq {
    host => "10.x.x.12"
    queue => "integration"
    durable => true
    key => "#"
    exchange => "integ"
    threads => 3
    prefetch_count => 50
    port => 5672
    user => "guest"
    password => "guest"
  }
}
output {
   elasticsearch {
       hosts => ["10.x.x.11:9200"]
       index => "your_index"
       document_type => "your_type"
   }
}