Azure / logstash-output-kusto

Logstash output for Kusto
Apache License 2.0
13 stars 14 forks source link

Using logstash-output-kusto plugin in a windows container running logstash #34

Closed omkarg81 closed 3 years ago

omkarg81 commented 3 years ago

Have setup logstash on a kubernetes windows container and doing output to kusto using the logstash-output-kusto plugin (also installed on same container). In the logstash logs, we are seeing the error -

[Kusto to ingest file: /usr/share/logstash/data/kusto/YYYY-MM-dd-HH-mm.txt.dbname.tablename] kusto - Uploading failed, retrying. {:exception=>Java::ComMicrosoftAzureKustoIngestExceptions::IngestionServiceException, :message=>"Unable to get ingestion resources for this type: TempStorage", :path=>"/usr/share/logstash/data/kusto/YYYY-MM-dd-HH-mm.txt.dbname.tablename"

Where should the kusto temporary file be written so that plugin can read the file and send events over to ADX (kusto) cluster-table for ingestion?

omkarg81 commented 3 years ago

ADX cluster's NSG rules were causing the incoming event data to be blocked thereby causing this issue. It was not really an issue within the plugin itself