input { stdin { } jdbc { jdbc_connection_string => "jdbc:oracle:thin:@//192.168.26.92:1521/esdb01" jdbc_user => "graopr" jdbc_password => "life12345" jdbc_driver_library => "/data/funde/logstash-6.1.1/oraclesyc/ojdbc14-10.2.0.4.0.jar" jdbc_driver_class => "Java::oracle.jdbc.driver.OracleDriver" jdbc_paging_enabled => "true" jdbc_page_size => "300000" last_run_metadata_path => "/data/funde/logstash-6.1.1/bin/synclogs/myinfo" statement_filepath => "/data/funde/logstash-6.1.1/bin/policyproinfoupdate.sql" #statement => "select * from std where creattime > :sql_last_value" schedule => "* * * * * *" jdbc_default_timezone =>"Asia/Shanghai" } } filter { json { source => "message" remove_field => ["host", "@timestamp", "httpversion", "@version"] } date{ match => ["timestamp","yyyy-MM-dd-HH:mm:ss"] locale => "cn" } } output { elasticsearch { hosts => ["http://192.168.26.81:9200","http://192.168.26.89:9200","http://192.168.26.80:9200","http://192.168.26.87:9200"] index => "policyproinfo" document_id => "%{po_policy_no}+%{pp_prod_seq}" } stdout {} }