database - logstash error - database File does not exist or cannot be opened
问题描述
i making map using geoip, elastic stack but i have problem
docker-elk, filebeat
input {
beats {
port => 5000
}
}
filter {
grok {
match => { "message" => "%{COMMONAPACHELOG}" }
}
date {
match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
}
geoip {
source => "clientip"
target => "geoip"
database => "/home/semicolon/DDYZD/ELK/GeoLite2-City-CSV_20210202/GeoLite2-City-Blocks-IPv4.csv"
}
}
## Add your filters / logstash plugins configuration here
output {
elasticsearch {
hosts => ":9200"
user => ""
password => ""
index => 'logstash-ddyzd-%{+YYYY.MM.dd}'
}
}
this is my logstash pipeline code, and User and password are filled in
docker-compose up than make error
[2021-02-06T13:20:10,419][ERROR][logstash.filters.geoip ] Invalid setting for geoip filter plugin:
logstash_1 |
logstash_1 | filter {
logstash_1 | geoip {
logstash_1 | # This setting must be a path
logstash_1 | # File does not exist or cannot be opened /home/semicolon/DDYZD/ELK/GeoLite2-City-CSV_20210202/GeoLite2-City-Blocks-IPv4.csv
logstash_1 | database => "/home/semicolon/DDYZD/ELK/GeoLite2-City-CSV_20210202/GeoLite2-City-Blocks-IPv4.csv"
logstash_1 | ...
logstash_1 | }
logstash_1 | }
like this
Database is exist at /home/semicolon/DDYZD/ELK/GeoLite2-City-CSV_20210202/GeoLite2-City-Blocks-IPv4.csv
and i also try mmdb file, but same result
please help me
解决方案
推荐阅读
- javascript - 空手道 JavaScript 数组格式
- javascript - 如何向使用 plupload 库上传的文件添加信息?
- javascript - 如何使用没有文件名参数的 multer 以多部分/表单数据内容类型发送应用程序/八位字节流数据?
- vue.js - Vuetify 面包屑范围插槽
- java - 自动装配的变量为空
- ansible - 如何使用 mv 模块 Ansible
- oracle - Oracle 分区拆分分区问题
- swift - NSFileManager 无法保存 - 没有这样的文件或目录
- php - 获得给定数组中组合总和的最低价格
- php - 如何从控制器获取 ajax 响应到视图上的 PHP 变量