将数据上传到弹性搜索时出错

Question

问题：

当我使用以下 curl 命令将数据发送到弹性搜索时，我收到以下错误

命令： 我使用 curl 命令创建了以下模板，效果很好

curl -X PUT http://localhost:9200/_template/cn_health_monitoring -d '{"template":"cn_health_monitoring","settings":{"index.refresh_interval":"5s"},"mappings":{"default em>":{"_all":{"enabled":true},"properties":{"@timestamp":{"type":"string"},"appliance_id_string":{"type":"string", "index":"not_analyzed"},"mother_board_serial_number":{"type":"string","index":"not_analyzed"},"mother_board_name":{"type":"string","index":"not_analyzed "}}}}}'

但是

当我使用以下命令发送数据时，我收到错误 500 或 400

curl -XPOST http://localhost:9200/_bulk -d '{"index":{"_index":"cn_health_monitoring","_type":"ipfix"}} \n {"@timestamp":"2015-07-18 21:39:10","appliance_id_string":"32444335-3732-4A31-5143-A0B3CC82A9B1""mother_board_serial_number":"5CD2271JQC","mother_board_name":"HP Pavilion g6笔记本电脑"}'

错误：

{
    "error": "ActionRequestValidationException[Validation Failed: 1: no requests added;]",
    "status": 500
} 

和

{
    "took": 219,
    "errors": true,
    "items": [
        {
            "create": {
                "_index": "cn_health_monitoring",
                "_type": "ipfix",
                "_id": "ghfPSLv1Tayw03jTr0Zi6Q",
                "status": 400,
                "error": "MapperParsingException[failed to parse, document is empty]"
            }
        }
    ]
}

Answer 1

首先，您在 Mother_board_serial_number 之前缺少逗号

然后，您可以使用文件来执行此操作（也许还有其他方法，但这似乎可行）

eran@eran-laptop:~$ cat r
{"index":{"_index":"cn_health_monitoring","_type":"ipfix"}}
{"@timestamp":"2015-07-18 21:39:10","appliance_id_string":" 32444335-3732-4A31-5143-A0B3CC82A9B1","mother_board_serial_number":" 5CD2271JQC","mother_board_name":" HP Pavilion g6 Notebook PC"}

eran@eran-laptop:~$ curl -XPOST localhost:9200/_bulk --data-binary @r 
{"took":2,"errors":false,"items":[{"create":{"_index":"cn_health_monitoring","_type":"ipfix","_id":"AU6lweKRmOtv0CHjm9cD","_version":1,"status":201}}]}