应用场景:
通过logstash-filter-jdbc_static插件,静态“丰富化” logstash处理的数据。
filter{
jdbc_static {
loaders => [{
id => "cmd_dict"
query => "select cmd_id,cmd_name from t_cmd_dict WHERE 1=1"
local_table => "cmd_dict"
}]
local_db_objects => [{
name => "cmd_dict"
index_columns => ["cmd_id"]
columns => [
["cmd_id", "varchar(50)"],
["cmd_name", "varchar(255)"]
]
}]
local_lookups => [{
query => "select cmd_id,cmd_name from cmd_dict WHERE cmd_id = :cmd_id"
parameters => {
cmd_id => "command"
}
target => "cmdDictRes"
}]
#loader_schedule => "*/30 * * * *"
jdbc_user => "root"
jdbc_password => "yourPassword+"
jdbc_driver_class => "com.mysql.cj.jdbc.Driver"
jdbc_driver_library => "/usr/local/logstash-6.8.0/vendor/jar/jdbc/mysql-connector-java-8.0.15.jar"
jdbc_connection_string => "jdbc:mysql://xxx.xxx.xxx.xxx:3306/edr_end?characterEncoding=utf8&useSSL=false"
}
}
Mysql返回的结果集cmdDictRes,可用于“丰富化”数据