1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  # query可不填写
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  csv {
    fields => ["@message"]
    path => "/tmp/csv-export.csv"
  }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

input {
 elasticsearch {
    hosts => "localhost:9200"
    index => "kibana_sample_data_ecommerce"
	user => "elastic"
	password => "password"
    query => '{  
    "query": {
      "match_all": {}
      }
    }'
  }
}
 
output {
  file {
    path => "/tmp/csv-export.txt"
	codec => line { format => "%{@message}" }
  }
}

1

/app/logstash/bin/logstash -f /app/logstash/config/esTocsv.conf