使用 Logstash 把单个分隔符的多行文本文件导入到 Elasticsearch

要导入的数据：abc.txt(“\t”分隔，路径：/home/mubai/test/abc.txt)

111 aaa bbb
222 ccc ddd
​

Logstash 的配置文件：myconfig.conf

input {
    file {
        path => "/home/mubai/test/abc.txt"
        start_position => beginning
    }
}

filter {
    ruby {
        init => "@kname = ['id','key','value']"
        code => 'event.append(Hash[@kname.zip(event["message"].split("\t"))])'
    }
}

output {
    elasticsearch {
        hosts => localhost
        index => "logstash-test"
    }
    stdout { 
        codec => rubydebug 
    }
}
​

运行命令(Logstash 安装目录下)

bin/logstash -f myconfig.conf
​