elasticsearch - Logstash 5 Alpha4 到 elasticsearch5 Alpha4 通信错误

Question

Elasticsearch 5 使用 xpack 安全性进行保护，并与运行良好的 ldap Hook 。甚至用户在 role_mapping 中也有管理员权限。

Logstash 5配置如下

output {
  elasticsearch {
    hosts => ['localhost:9200']
    user => 'gaurav@gmail.com'
    password => 'pwd'
  }
}

出现以下错误，因此 logstash 无法将数据传递给 elasticsearch。

{:timestamp=>"2016-07-14T16:32:29.592000+0530", 
:message=>"Encountered an unexpected error submitting a bulk request! Will retry.", 
:error_message=>"undefined method code' for #", 
:class=>"NoMethodError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-4.1.1-java/lib/logstash/outputs/elasticsearch/common.rb:217:insafe_bulk'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-4.1.1-java/lib/logstash/outputs/elasticsearch/common.rb:105:in submit'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-4.1.1-java/lib/logstash/outputs/elasticsearch/common.rb:72:inretrying_submit'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-4.1.1-java/lib/logstash/outputs/elasticsearch/common.rb:23:in multi_receive'", "org/jruby/RubyArray.java:1653:ineach_slice'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-4.1.1-java/lib/logstash/outputs/elasticsearch/common.rb:22:in multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:136:inthreadsafe_multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_

Answer 1

我想我可能已经弄明白了。我正在使用 Logstash 5.1.1-alpine docker 镜像。据我所知，它带有elasticsearch-output plugin v4.5.0，似乎有这个错误。强制将该插件更新到最新版本 (6.2) 已解决此问题。

现在是我的 Dockerfile

FROM logstash:5.1.1-alpine

RUN $LOGSTASH_PATH/logstash-plugin install --version 6.2.0 logstash-output-elasticsearch

使用更新后的插件，我不再看到此错误。