我希望在logstash文件字段中更改一个值。
对于我的情况,我的logstash配置文件是这样的..
# Read input from filebeat by listening to port 5044 on which filebeat will send the data
input {
beats {
port => "5044"
}
}
filter {
######################################### For Solr ###############################
我使用logstash jdbc语句"select utl_raw.cast_to_varchar2(dbms_lob.substr(field,length( field )) from table;“来获取blob字段。logstash中的输出是像"\v\u0004\u0000\u0000\u0000\u0001\u0005\u0001\u0004\u0019\u0000c\u0000o\u0000m\u0000.\u0000w\u0000m\u0000.\u0000d\u0000a\u0000t\u0000a\u0000.\u0000I\u0000S\u0000M\u00
下面是详细信息
Sending Logstash's logs to /data/logs/logstash which is now configured via log4j2.properties
SLF4J: Class path contains multiple SLF4J bindings.
SLF4J: Found binding in [jar:file:/root/.m2/repository/org/apache/logging/log4j/log4j-slf4j-impl/2.6.2/log4j-slf4j-impl-2.6.2.jar!/org/slf4j/im