1.logstash 启动后数据传输了,但是 ElasticSearch 中没有生成索引,查看logstash日志,报错如下
[2018-06-08T14:46:25,387][WARN ]
[logstash.outputs.elasticsearch] Could not index event to Elasticsearch.
{:status=>400,
:action=>
["index",
{:_id=>nil, :_index=>"12.82-searchT-error", :_type=>"doc", :_routing=>nil},
#<LogStash::Event:0x3aa38b42>],
:response=>
{"index"=>{"_index"=>"12.82-searchT-error", "_type"=>"doc", "_id"=>nil, "status"=>400,
"error"=>{"type"=>"invalid_index_name_exception",
"reason"=>"Invalid index name [12.82-searchT-error], must be lowercase", "index_uuid"=>"_na_", "index"=>"12.82-searchT-error"}}}}
末尾说的很明确了,索引名必须是小写