如何使用 Logstash ans jdbc_streaming 过滤器将数据从 HTTP 输入发送到 ElasticSearch？

Question

我想使用 logstash 从 Http 向 elasticsearch 发送数据，我想使用 jdbc_streaming 过滤器插件丰富我的数据。这是我的 logstash 配置：

input {
  http {
    id => "sensor_data_http_input"
    user => "sensor_data"
    password => "sensor_data"
  }
}

filter {
  jdbc_streaming {
    jdbc_driver_library => "E:\ElasticStack\mysql-connector-java-8.0.18\mysql-connector-java-8.0.18.jar"
    jdbc_driver_class => "com.mysql.jdbc.Driver"
    jdbc_connection_string => "jdbc:mysql://localhost:3306/sensor_metadata"
    jdbc_user => "elastic"
    jdbc_password => "hide"
    statement => "select st.sensor_type as sensorType, l.customer as customer, l.department as department, l.building_name as buildingName, l.room as room, l.floor as floor, l.location_on_floor as locationOnFloor, l.latitude, l.longitude from sensors s inner join sensor_type st on s.sensor_type_id=st.sensor_type_id inner join location l on s.location_id=l.location_id where s.sensor_id= :sensor_identifier"
    parameters => { "sensor_identifier" => "sensor_id"}
    target => lookupResult
  }
  mutate {
    rename => {"[lookupResult][0][sensorType]" => "sensorType"}
    rename => {"[lookupResult][0][customer]" => "customer"}
    rename => {"[lookupResult][0][department]" => "department"}
    rename => {"[lookupResult][0][buildingName]" => "buildingName"}
    rename => {"[lookupResult][0][room]" => "room"}
    rename => {"[lookupResult][0][floor]" => "floor"}
    rename => {"[lookupResult][0][locationOnFloor]" => "locationOnFloor"}

    add_field => {
            "location" => "%{lookupResult[0]latitude},%{lookupResult[0]longitude}"
        }

    remove_field => ["lookupResult", "headers", "host"]
  }
}

output {
  elasticsearch {
    hosts =>["localhost:9200"]
    index => "sensor_data-%{+YYYY.MM.dd}"
    user => "elastic"
    password => "hide"
  }
}

但是当我启动 logstash 时，我看到以下错误：

[2020-01-09T22:57:16,260]
[ERROR][logstash.javapipeline]
[main] Pipeline aborted due to error {
    :pipeline_id=>"main", 
    :exception=>#<TypeError: failed to coerce jdk.internal.loader.ClassLoaders$AppClassLoader to java.net.URLClassLoader>, 
    :backtrace=>[
        "org/jruby/java/addons/KernelJavaAddons.java:29:in `to_java'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/vendor/bundle/jruby/2.5.0/gems/logstash-filter-jdbc_streaming-1.0.7/lib/logstash/plugin_mixins/jdbc_streaming.rb:48:in `prepare_jdbc_connection'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/vendor/bundle/jruby/2.5.0/gems/logstash-filter-jdbc_streaming-1.0.7/lib/logstash/filters/jdbc_streaming.rb:200:in `prepare_connected_jdbc_cache'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/vendor/bundle/jruby/2.5.0/gems/logstash-filter-jdbc_streaming-1.0.7/lib/logstash/filters/jdbc_streaming.rb:116:in `register'", "org/logstash/config/ir/compiler/AbstractFilterDelegatorExt.java:56:in `register'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:195:in `block in register_plugins'", "org/jruby/RubyArray.java:1800:in `each'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:194:in `register_plugins'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:468:in `maybe_setup_out_plugins'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:207:in `start_workers'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:149:in `run'", 
        "E:/ElasticStack/Logstash/logstash-7.4.1/logstash-core/lib/logstash/java_pipeline.rb:108:in `block in start'"], 
    :thread=>"#<Thread:0x17fa8113 run>"
}
[2020-01-09T22:57:16,598]
[ERROR][logstash.agent] Failed to execute action {
    :id=>:main, 
    :action_type=>LogStash::ConvergeResult::FailedAction, 
    :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", 
    :backtrace=>nil
}

我正在用我的 mysql 数据库中的一些数据丰富我的 http 输入，但它根本没有启动 logstash。

Answer 1

我发现了两个潜在的问题，但您需要在此处检查哪个才是真正的问题：

MySql Driver class name has changed to com.mysql.cj.jdbc.Driver
当您在类加载器路径之外使用最新的 jdbc 驱动程序并结合较新的 jdk 版本时，可能会出现类加载器问题。在 github 上存在一些问题。将驱动放在<logstash-install-dir>/vendor/jar/jdbc/下的logstash文件夹中（需要先创建这个文件夹）。如果这不起作用，请将驱动程序移动到 <logstash-install-dir>/logstash-core\lib\jars 下并且不要在配置文件中提供任何驱动程序路径：jdbc_driver_library => ""

Answer 2

通过完全从配置文件中删除 jdbc_driver_library 选项解决了问题，并且如前所述，将 jdbc_driver_class 设置为 com.mysql.cj.jdbc.Driver.

如何使用 Logstash ans jdbc_streaming 过滤器将数据从 HTTP 输入发送到 ElasticSearch？

How to send data from HTTP input to ElasticSearch using Logstash ans jdbc_streaming filter?

elasticsearch

logstash

kibana

elastic-stack