Comments (29)

• 

  Johana Hernandez

  Jun 14, 2019, 3:21:09 PM

  Hello Anurag, I appreciate your input on this topic, I would like to know if you could help me with an error when executing the integration of MongoDB to ES .. I follow your recommendation in the configuration of the file but at the moment of reading from Mongo it remains in an infinite reading cycle. Annex the configuration file and the fragment of the cycle. input { mongodb{ uri => 'mongodb://user:password@server:27017/admin?connectTimeoutMS=10000&authSource=admin&authMechanism=SCRAM-SHA-1' placeholder_db_dir => '/Logstash/logstash-7.1.1/db_dir' placeholder_db_name => 'logstash_sqlite.db' collection => 'Monedas' batch_size => 3 generateId => true } } filter { mutate { remove_field => [ "_id" ] } } output { elasticsearch { action => "index" index => "indice_prueba" hosts => ["localhost:9200"] } } This fragment of error repeats itself incessantly. -------------------------------------------------------------------------------------------------------------------------------------------- [2019-06-14T10:32:13.006000 #35556] DEBUG -- : MONGODB | server:27017 | admin.listCollections | SUCCEEDED | 0.181s D, [2019-06-14T10:32:13.341000 #35556] DEBUG -- : MONGODB |server:27017 | admin.listCollections | STARTED | {"listCollections"=>1, "cursor"=>{}, "nameOnly"=>true, "filter"=>{"name"=>{"$not"=>/system\.|\$/}}} -------------------------------------------------------------------------------------------------------------------------------------------- Do you have any idea why this happens? Regards!

• 

  Anurag Srivastava

  Aug 14, 2019, 3:55:49 AM

  @johana: Please provide the Logstash configuration file content. Although it is too late but please let me know if this issue was resolved?

• 

  PADHIRE REDDY

  Jun 15, 2020, 3:52:45 PM

  @anurag could you please help me out I'm getting same This fragment of error repeats itself incessantly. -------------------------------------------------------------------------------------------------------------------------------------------- [2019-06-14T10:32:13.006000 #35556] DEBUG -- : MONGODB | server:27017 | admin.listCollections | SUCCEEDED | 0.181s D, [2019-06-14T10:32:13.341000 #35556] DEBUG -- : MONGODB |server:27017 | admin.listCollections | STARTED | {"listCollections"=>1, "cursor"=>{}, "nameOnly"=>true, "filter"=>{"name"=>{"$not"=>/system\.|\$/}}} -

• 

  Anurag Srivastava

  Jun 15, 2020, 5:51:32 PM

  @padhire: Please share the Logstash configuration file content.

• 

  PADHIRE REDDY

  Jun 16, 2020, 4:14:18 AM

  @Anurag this is my config file input { mongodb { uri => "mongodb://localhost:27017/test" placeholder_db_dir => "D:/elk/logstash-7.7.1/place_holder_db_dir" placeholder_db_name => "logstash_sqlite.db" collection => "employee" batch_size => 5 } } output { stdout { codec => rubydebug } elasticsearch { hosts => "localhost:9200" index => "employeemd" "document_type" => "data" } }

• 

  PADHIRE REDDY

  Jun 16, 2020, 4:46:35 AM

  input { mongodb { uri => "mongodb://localhost:27017/test" placeholder_db_dir => "D:/elk/logstash-7.7.1/place_holder_db_dir" placeholder_db_name => "logstash_sqlite.db" collection => "employee" batch_size => 50 } } filter { } output { stdout { codec => rubydebug } elasticsearch { action => "index" hosts => "localhost:9200" index => "employeemd" "document_type" => "data" } }

• 

  Anurag Srivastava

  Jun 16, 2020, 3:58:53 PM

  Hey this seems ok to me, have you tried with a new collection after adding some data in MongoDB. Probably we are getting success from MongoDB side and may be it is not picking the records so it is good to try on a new collection or by adding some data to the existing collection after executing the Logstash configuration.

• 

  Todd K

  Jun 22, 2020, 8:12:03 PM

  Hi, here is my input with the associated error. Any help you can provide would be greatly appreciated! input { mongodb { uri => 'mongodb://localhost:27017/test_phoenix' placeholder_db_dir => 'C:/Users/fdub_user/Documents/logstash-7.6.2' placeholder_db_name => 'logstash_sqlite.db' collection => 'cell_towers' batch_size => 5000 } } filter { } output { stdout { codec => rubydebug } elasticsearch { action => "index" index => "mongo_cell_towers" hosts => ["localhost:9200"] user => "elastic" password => "1234!@#$" } } Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of [ \\t\\r\\n], \"#\", \"{\" at line 2, column 13 (byte 22) after input {\r\n uri ", :backtrace=>["C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/compiler.rb:49:in `compile_graph'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2580:in `map'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:161:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/java_pipeline.rb:27:in `initialize'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/pipeline_action/create.rb:36:in `execute'", "C:/Users/fdub_user/Documents/logstash-7.6.2/logstash-core/lib/logstash/agent.rb:326:in `block in converge_state'"]}

• 

  Anurag Srivastava

  Jun 24, 2020, 4:57:02 AM

  Hi Todd, can you please check if your configuration file is proper: sudo bin/logstash --config.test_and_exit -f <path_to_config_file>

• 

  Todd K

  Jun 25, 2020, 8:25:22 AM

  Thanks Anurag, I was able to get it to start pulling from Mongo then pushing to ELK, but I got the error where the _id from Mongo wasn't allowing it to ingest the data. I then changed it and it says success connecting to mongo, but does not push the data to ELK.

• 

  Anurag Srivastava

  Jun 25, 2020, 9:16:08 AM

  Have you tried by adding some fresh entries in MongoDB after executing the configuration as probably Logstash has updated the pointer. Try once and let me know if it works. In case of any issues please share the error message you are getting.

• 

  maniprakash muthukrishnan

  Jun 29, 2020, 9:40:10 PM

  Hi Anurag, I am also facing the same issue .it started reading from Mongo it remains in an infinite reading cycle and index is created without any documents D, [2020-06-29T16:31:01.055046 #105989] DEBUG -- : MONGODB | [77] 127.0.0.1:27017 | test.find | SUCCEEDED | 0.002s D, [2020-06-29T16:31:01.090770 #105989] DEBUG -- : MONGODB | [78] 127.0.0.1:27017 #1 | test.listCollections | STARTED | {"listCollections"=>1, "cursor"=>{}, "nameOnly"=>true, "$db"=>"test", "lsid"=>{"id"=><BSON::Binary:0x2022 type=uuid data=0xed5399691cb74d71...>}} D, [2020-06-29T16:31:01.094120 #105989] DEBUG -- : MONGODB | [78] 127.0.0.1:27017 | test.listCollections | SUCCEEDED | 0.002s D, [2020-06-29T16:31:06.133707 #105989] DEBUG -- : MONGODB | [79] 127.0.0.1:27017 #1 | test.find | STARTED | {"find"=>"p1", "filter"=>{"_id"=>{"$gt"=>BSON::ObjectId('5efa152e4c3cc8a8b1ad6d7e')}}, "limit"=>5, "$db"=>"test", "lsid"=>{"id"=><BSON::Binary:0x2022 type=uuid data=0xed5399691cb74d71...>}} D, [2020-06-29T16:31:06.145513 #105989] DEBUG -- : MONGODB | [79] 127.0.0.1:27017 | test.find | SUCCEEDED | 0.009s D, [2020-06-29T16:31:06.190825 #105989] DEBUG -- : MONGODB | [80] 127.0.0.1:27017 #1 | test.listCollections | STARTED | {"listCollections"=>1, "cursor"=>{}, "nameOnly"=>true, "$db"=>"test", "lsid"=>{"id"=><BSON::Binary:0x2022 type=uuid data=0xed5399691cb74d71...>}} D, [2020-06-29T16:31:06.218383 #105989] DEBUG -- : MONGODB | [80] 127.0.0.1:27017 | test.listCollections | SUCCEEDED | 0.017s D

• 

  Leonardo Percoco

  Jul 1, 2020, 12:01:17 PM

  I have the same problem of maniprakash...

• 

  sumit sharna

  Aug 26, 2020, 7:32:43 AM

  hi @anurag ...I am facing issue while updating the existing data. When i insert any data it gets indexed into elastic but when i Update it doesn't. How to solve that?

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:49 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Durga AK

  Oct 21, 2020, 9:29:50 AM

  Any update on the last comment. Even I'm facing the same issue.

• 

  Rocky Paul

  Oct 21, 2020, 10:18:30 AM

  Hi Durga, can you please let me know what error you are getting and what version of Elastic Stack you are using?

• 

  Durga AK

  Oct 27, 2020, 5:08:50 AM

  Hi Rocky, Im using Elastic search version 7.9.2. I'm connected to a mongodb, using logstash Im importing mongodb data into elastic search. Logstash version is 7.9.2. Issue is new data is getting pushed to Elastic search, already existing data is not being imported. Also any updates to the existing data in the collection is not being moved to Elastic search. Is this designed to be like this or can we make any configuration changes to achieve this. Any idea on this will be of great help. Thanks!

• 

  Shota Hayakawa

  Nov 6, 2020, 2:36:19 AM

  Hi Hello everyone. I had the same problem as you, but I was able to solve it. Try putting this setting in the filter. ------------------------- filter{ mutate { copy => { "_id" => "[@metadata][_id]"} remove_field => ["_id"] } } ------------------------- This will allow you to successfully import the document. Good luck.

• 

  Anurag Srivastava

  Dec 30, 2020, 6:59:36 AM

  Hi Shota, thanks for sharing the solution. Hi Durga, let me know if your problem is solved now?

• 

  Daniel X

  Mar 13, 2022, 5:38:04 AM

  Hi Anurag, Thanks for sharing. I am new to ElasticSearch. I followed the steps in your article. When I started ElasticSearch and LogStash, no error was reported, and the index was created on ElasticSearch, but the docs.count is always 0 regardless I add/delete documents in MongoDB. Then I tried to query the documents, and the documents actually were not pull into the ElasticSearch. In the mongodata.conf file, the output is: output { stdout { codec => rubydebug } elasticsearch { action => "index" index => "mongo_log_data" hosts => ["localhost:9200"] } } I am wondering is it because I only action is "index" that only the index was created, while the documents were not pulled into the ElasticSearch. It would be greatly appreciated if you could help me with this. Thanks

• 

  Anurag Srivastava

  Mar 13, 2022, 5:22:23 PM

  After creating the pipeline have you created new records in MongoDB? Please check and let me know if it works.

• 

  Ram Babu

  Apr 29, 2022, 1:28:34 PM

  Hi Anurag, Do you have a piece of code to update, delete document for config file while copying documents from mongodb to elasticseaerch. logstash successfully creating new document as soon as created in mongodb. but when mongodb document gets updated it is not reflected in elastic search. mongo db and elastic search out of sync for update and delete. Thanks in advance. Regards

Leave a comment