数据准备
这里以Elasticsearch官方标准的workbench测试数据http_logs为例,包含的字段如下:
clientip "10.123.123.43"
request: "GET /images..._id,clientip:clientip,request:request,status,status',
'es.index.read.missing.as.empty' = 'true',
'es.input.use.sliced.partitions..._id,clientip:clientip,request:request,status,status',
'es.nodes.wan.only'='true',...新增数据
我们新增一条http log,clientip设置为特殊的255.255.255.255。写入到http_log.json,并上传至HDFS的/es-hadoop目录。...{"@timestamp": 895435190,"clientip": "255.255.255.255","request": "GET /images/102328s.gif HTTP/1.1",