Is logstash-input-log4j2 not suit for logstash2.1.1?

[kangmingchen]

Because when i install , it throws error log just like :

logstash-output-http (>= 0) java depends on
  logstash-mixin-http_client (< 3.0.0, >= 2.0.2) java depends on
    logstash-core (< 3.0.0, >= 2.0.0.beta2) java

logstash-input-log4j2 (>= 0) java depends on
  logstash-core (< 2.0.0, >= 1.4.0) java

Thanks,waiting for your answer.

[estanislaobosch]

A workaround to solve this you can 0- execute 'gem install logstash-devutils' 1- clone the master branch to path_to_plugin_dir 2- in path_to_plugin_dir execute 'rake vendor' 3- in path_to_plugin_dir execute 'gem build logstash-input-log4j2.gemspec' 4- in path_to_logstash_dir execute './bin/plugin install path_to_plugin_dir/logstash-input-log4j2-5.2-java.gem

Hope this helps

[rolandkofler]

Oh this needs jruby, ruby2.0 its a horrortrpi on ubuntu could'nt somebody provide the gem?

[ogg1e]

@estanislaobosch your workaround fails for me: gem install logstash-devutils ERROR: Could not find a valid gem 'logstash-devutils' (>= 0), here is why: Found logstash-devutils (0.0.18), but was for platform java

[estanislaobosch]

Maight it be that you are using ruby instead of jruby?

2016-01-22 16:55 GMT-03:00 Gary Ogden [email protected]:

@estanislaobosch https://github.com/estanislaobosch your workaround fails for me: gem install logstash-devutils ERROR: Could not find a valid gem 'logstash-devutils' (>= 0), here is why: Found logstash-devutils (0.0.18), but was for platform java

— Reply to this email directly or view it on GitHub https://github.com/jurmous/logstash-log4j2/issues/16#issuecomment-174027240 .

[ogg1e]

I had to upgrade to ruby 2.1 by doing this:

yum groupinstall -y development
 gpg2 --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3
curl -L get.rvm.io | bash -s stable
source /etc/profile.d/rvm.sh
rvm reload
rvm install 2.1.0 
rvm install jruby

And then I followed the steps above and it worked.

[SergiiOliinyk]

Couldn't find any input plugin named 'log4j2'. Are you sure this is correct? T rying to load the log4j2 input plugin resulted in this error: no such file to lo ad -- logstash/inputs/log4j2

I've done everything above but now getting an error while lauching with input log4j2 input { log4j2 { port => 7000 mode => "server" } }

output { elasticsearch { hosts => ["localhost:9200"] } stdout { codec => rubydebug } }

Please advice

[ogg1e]

@88SergiiOliinyk What are the exact steps you followed? My list was to do these steps:

yum groupinstall -y development
 gpg2 --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3
curl -L get.rvm.io | bash -s stable
source /etc/profile.d/rvm.sh
rvm reload
rvm install 2.1.0 
rvm install jruby

And then I followed these instructions:

execute 'gem install logstash-devutils'
clone the master branch to path_to_plugin_dir
in path_to_plugin_dir execute 'rake vendor'
in path_to_plugin_dir execute 'gem build logstash-input-log4j2.gemspec'
in path_to_logstash_dir execute './bin/plugin install path_to_plugin_dir/logstash-input-log4j2-5.2-java.gem

My conf file:

input {
  log4j2 {
    port => 7000
    mode => "server"
    type => "log4j2"
  }
}
output {
elasticsearch { hosts => ["localhost:9200"] }
stdout { codec => rubydebug }
}

[SergiiOliinyk]

I have Ruby 2.1.7 and Jruby 1.7.24, which versiob should be installed ?

[SergiiOliinyk]

yum groupinstall -y development gpg2 --keyserver hkp://keys.gnupg.net --recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 curl -L get.rvm.io | bash -s stable source /etc/profile.d/rvm.sh rvm reload rvm install 2.1.0 rvm install jruby And then I followed these instructions:

execute 'gem install logstash-devutils' clone the master branch to path_to_plugin_dir in path_to_plugin_dir execute 'rake vendor' in path_to_plugin_dir execute 'gem build logstash-input-log4j2.gemspec' in path_to_logstash_dir execute './bin/plugin install path_to_plugin_dir/logstash-input-log4j2-5.2-java.gem

I've managed all above

[SergiiOliinyk]

WARNING: prerelease dependency on logstash-core (< 3.0.0, >= 2.0.0.beta2) is no t recommended WARNING: open-ended dependency on logstash-devutils (>= 0, development) is not recommended if logstash-devutils is semantically versioned, use: add_development_dependency 'logstash-devutils', '~> 0' WARNING: See http://guides.rubygems.org/specification-reference/ for help Successfully built RubyGem Name: logstash-input-log4j2 Version: 5.2 File: logstash-input-log4j2-5.2-java.gem

Getting this WARNING while executing gem build logstash-input-log4j2.gemspec

[SergiiOliinyk]

←[33mlog4j2 plugin is using the 'milestone' method to declare the version of th plugin this method is deprecated in favor of declaring the version inside the emspec. {:level=>:warn}←[0m The error reported is: Log4j2 java library not loaded

This is what i get when launch logstash

[SergiiOliinyk]

logstash -f input.conf -l log.txt

input { log4j2 { port => 7000 mode => "server" type => "log4j2" } } output { elasticsearch { hosts => ["localhost:9200"] } stdout { codec => rubydebug } }

[SergiiOliinyk]

@ogg1e Could you please advise, would be very thankfull

[SergiiOliinyk]

@estanislaobosch Could you please advise, would be very thankfull

[estanislaobosch]

Have you done the 'rake vendor' step successfully? That should be the reason why logstash doesn't find the log4j2 library. A workaround should be to manually place the library in "logstash_dir/vendor/bundle/jruby/1.9/gems/logstash-input-log4j-2.0.4-java/vendor/jar-dependencies/runtime-jars" directory, some of the version numbers might be different but is should be something like it. Hope this helps.

[SergiiOliinyk]

@estanislaobosch log4j-1.2.17 this is what i have

[SergiiOliinyk]

@estanislaobosch I assume it shoud be log4j-api-2.1 and log4j-core-2.1 ?

[SergiiOliinyk]

@estanislaobosch Have you done the 'rake vendor' step successfully? Yes no erros

[estanislaobosch]

I have log4j-1.2.17.jar in that directory. I really don't know what could be wrong then.

[SergiiOliinyk]

@estanislaobosch input - tcp works fine. I'v replaced with log4j-api-2.1 and log4j-core-2.1 , the same thing

[SergiiOliinyk]

Gem::Specification.new do |s| s.name = 'logstash-input-log4j2' s.version = '5.2' s.licenses = ['Apache License (2.0)'] s.summary = "Read events over a TCP socket from a Log4j2 SocketAppender" s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program" s.authors = ["Jurriaan Mous"] s.email = '[email protected]' s.homepage = "https://github.com/jurmous/logstash-log4j2" s.require_paths = ["lib"]

Files

#s.files = git ls-files.split($)+::Dir.glob('vendor/*')

s.files = Dir['lib//*','spec//','vendor/__/','.gemspec','.md','CONTRIBUTORS','Gemfile','LICENSE','NOTICE.TXT']

Tests

s.test_files = s.files.grep(%r{^(test|spec|features)/})

Special flag to let us know this is actually a logstash plugin

s.metadata = { "logstash_plugin" => "true", "logstash_group" => "input" }

s.platform = 'java'

s.add_runtime_dependency "logstash-core", ">= 2.0.0.beta2", "< 3.0.0"

s.add_development_dependency 'logstash-devutils' end

[SergiiOliinyk]

PATH remote: vendor/local_gems/fc91c77b/logstash-input-log4j2-5.2-java specs: logstash-input-log4j2 (5.2-java) logstash-core (>= 2.0.0.beta2, < 3.0.0)

GEM remote: https://rubygems.org/ specs: addressable (2.3.8) arr-pm (0.0.10) cabin (> 0) atomic (1.1.99-java) avl_tree (1.2.1) atomic (~> 1.1) awesome_print (1.6.1) aws-sdk (2.1.36) aws-sdk-resources (= 2.1.36) aws-sdk-core (2.1.36) jmespath (~> 1.0) aws-sdk-resources (2.1.36) aws-sdk-core (= 2.1.36) aws-sdk-v1 (1.66.0) json (~> 1.4) nokogiri (>= 1.4.4) backports (3.6.7) benchmark-ips (2.3.0) bindata (2.1.0) buftok (0.2.0) builder (3.2.2) cabin (0.7.2) childprocess (0.5.8) ffi (~> 1.0, >= 1.0.11) ci_reporter (2.0.0) builder (>= 2.1.2) ci_reporter_rspec (1.0.0) ci_reporter (~> 2.0) rspec (>= 2.14, < 4) cinch (2.3.1) clamp (0.6.5) coderay (1.1.0) concurrent-ruby (0.9.2-java) coveralls (0.8.10) json (~> 1.8) rest-client (>= 1.6.8, < 2) simplecov (~> 0.11.0) term-ansicolor (~> 1.3) thor (~> 0.19.1) tins (~> 1.6.0) diff-lcs (1.2.5) docile (1.1.5) domain_name (0.5.25) unf (>= 0.0.5, < 1.0.0) edn (1.1.0) elasticsearch (1.0.15) elasticsearch-api (= 1.0.15) elasticsearch-transport (= 1.0.15) elasticsearch-api (1.0.15) multi_json elasticsearch-transport (1.0.15) faraday multi_json equalizer (0.0.10) faraday (0.9.2) multipart-post (>= 1.2, < 3) ffi (1.9.10-java) ffi-rzmq (2.0.4) ffi-rzmq-core (>= 1.0.1) ffi-rzmq-core (1.0.4) ffi (~> 1.9) file-dependencies (0.1.6) minitar filesize (0.0.4) filewatch (0.6.7) flores (0.0.6) fpm (1.3.3) arr-pm (~> 0.0.9) backports (>= 2.6.2) cabin (>= 0.6.0) childprocess clamp (~> 0.6) ffi json (>= 1.7.7) gelf (1.3.2) json gelfd (0.2.0) gem_publisher (1.5.0) gems (0.8.3) geoip (1.6.1) gmetric (0.1.3) hipchat (1.5.2) httparty mimemagic hitimes (1.2.3-java) http (0.9.8) addressable (~> 2.3) http-cookie (~> 1.0) http-form_data (~> 1.0.1) http_parser.rb (~> 0.6.0) http-cookie (1.0.2) domain_name (~> 0.5) http-form_data (1.0.1) http_parser.rb (0.6.0-java) httparty (0.13.7) json (~> 1.8) multi_xml (>= 0.5.2) i18n (0.6.9) insist (1.0.0) jar-dependencies (0.3.1) jls-grok (0.11.2) cabin (>= 0.6.0) jls-lumberjack (0.0.26) concurrent-ruby jmespath (1.1.3) jrjackson (0.3.7) jruby-kafka (1.4.0-java) jar-dependencies (~> 0) ruby-maven (~> 3.1) jruby-openssl (0.9.12-java) json (1.8.3-java) kramdown (1.9.0) logstash-codec-collectd (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-dots (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-edn (2.0.2) edn logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-edn_lines (2.0.2) edn logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-es_bulk (2.0.2) logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-fluent (2.0.2-java) logstash-core (>= 2.0.0.beta2, < 3.0.0) msgpack-jruby logstash-codec-graphite (2.0.2) logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-json (2.0.4) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-json_lines (2.0.2) logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-line (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-msgpack (2.0.2-java) logstash-core (>= 2.0.0.beta2, < 3.0.0) msgpack-jruby logstash-codec-multiline (2.0.4) jls-grok (~> 0.11.1) logstash-core (>= 2.0.0, < 3.0.0) logstash-patterns-core logstash-codec-netflow (2.0.2) bindata (>= 1.5.0) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-oldlogstashjson (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-plain (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-codec-rubydebug (2.0.4) awesome_print logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-core (2.1.1-java) cabin (~> 0.7.0) clamp (~> 0.6.5) concurrent-ruby (= 0.9.2) filesize (= 0.0.4) gems (~> 0.8.3) i18n (= 0.6.9) jrjackson (~> 0.3.7) jruby-openssl (>= 0.9.11) minitar (~> 0.5.4) pry (~> 0.10.1) rubyzip (~> 1.1.7) stud (~> 0.0.19) thread_safe (~> 0.3.5) treetop (< 1.5.0) logstash-devutils (0.0.18-java) gem_publisher insist (= 1.0.0) kramdown minitar rake rspec (~> 3.1.0) rspec-wait stud (>= 0.0.20) logstash-filter-anonymize (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) murmurhash3 logstash-filter-checksum (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-clone (2.0.4) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-csv (2.1.0) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-date (2.0.2) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-generator logstash-output-null logstash-filter-dns (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-drop (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-fingerprint (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) murmurhash3 logstash-filter-geoip (2.0.4) geoip (>= 1.3.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) lru_redux (~> 1.1.0) logstash-filter-grok (2.0.2) jls-grok (~> 0.11.1) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-patterns-core logstash-filter-json (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-kv (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-metrics (3.0.0) logstash-core (>= 2.0.0.beta2, < 3.0.0) metriks thread_safe logstash-filter-multiline (2.0.3) jls-grok (~> 0.11.0) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-patterns-core logstash-filter-mutate (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-grok logstash-patterns-core logstash-filter-ruby (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-date logstash-filter-sleep (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-split (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-syslog_pri (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-throttle (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-urldecode (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-useragent (2.0.3) logstash-core (>= 2.0.0.beta2, < 3.0.0) lru_redux (~> 1.1.0) user_agent_parser (>= 2.0.0) logstash-filter-uuid (2.0.3) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-xml (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) nokogiri xml-simple logstash-input-beats (2.0.3) concurrent-ruby (~> 0.9.2) logstash-codec-multiline (~> 2.0.3) logstash-codec-plain logstash-core (>= 2.0.0, < 3.0.0) logstash-input-couchdb_changes (2.0.2) json logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (>= 0.0.22) logstash-input-elasticsearch (2.0.2) elasticsearch (~> 1.0, >= 1.0.6) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-eventlog (3.0.1) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) win32-eventlog (~> 0.6.5) logstash-input-exec (2.0.4) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-file (2.0.3) addressable filewatch (~> 0.6, >= 0.6.5) logstash-codec-multiline (~> 2.0.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-ganglia (2.0.4) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-gelf (2.0.2) gelfd (= 0.2.0) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-generator (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-graphite (2.0.4) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-tcp logstash-input-heartbeat (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud logstash-input-http (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) puma (~> 2.11.3) stud logstash-input-imap (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) mail stud (~> 0.0.22) logstash-input-irc (2.0.3) cinch logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-jdbc (2.0.5) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) rufus-scheduler sequel logstash-input-kafka (2.0.2) jruby-kafka (>= 1.2.0, < 2.0.0) logstash-codec-json logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (>= 0.0.22, < 0.1.0) logstash-input-log4j (2.0.4-java) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-lumberjack (2.0.5) concurrent-ruby jls-lumberjack (~> 0.0.26) logstash-codec-multiline (~> 2.0.4) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-pipe (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-rabbitmq (3.1.1) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-rabbitmq_connection (>= 2.2.0, < 3.0.0) logstash-input-redis (2.0.2) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) redis logstash-input-s3 (2.0.3) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws stud (~> 0.0.18) logstash-input-snmptrap (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) snmp logstash-input-sqs (2.0.3) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws (>= 1.0.0) logstash-input-stdin (2.0.2) concurrent-ruby logstash-codec-json logstash-codec-json_lines logstash-codec-line logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-syslog (2.0.2) concurrent-ruby logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-date logstash-filter-grok stud (>= 0.0.22, < 0.1.0) thread_safe logstash-input-tcp (3.0.0) logstash-codec-json logstash-codec-json_lines logstash-codec-line logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-twitter (2.2.0) logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (>= 0.0.22, < 0.1) twitter (= 5.15.0) logstash-input-udp (2.0.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) stud (~> 0.0.22) logstash-input-unix (2.0.4) logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-xmpp (2.0.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) xmpp4r (= 0.5) logstash-input-zeromq (2.0.2) ffi-rzmq (~> 2.0.4) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws (2.0.2) aws-sdk (~> 2.1.0) aws-sdk-v1 (>= 1.61.0) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-http_client (2.0.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) manticore (>= 0.4.1) logstash-mixin-rabbitmq_connection (2.2.0-java) logstash-core (>= 2.0.0.beta2, < 3.0.0) march_hare (~> 2.11.0) stud (~> 0.0.22) logstash-output-cloudwatch (2.0.2) aws-sdk logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws rufus-scheduler (~> 3.0.9) logstash-output-csv (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-filter-json logstash-output-file logstash-output-elasticsearch (2.2.0-java) cabin (~> 0.6) concurrent-ruby elasticsearch (~> 1.0, >= 1.0.13) logstash-core (>= 2.0.0, < 3.0.0) manticore (~> 0.4.2) stud (~> 0.0, >= 0.0.17) logstash-output-email (3.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) mail (~> 2.6.0, >= 2.6.3) logstash-output-exec (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-file (2.2.0) logstash-codec-json_lines logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-ganglia (2.0.2) gmetric (= 0.1.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-gelf (2.0.2) gelf (= 1.3.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-graphite (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-hipchat (3.0.2) hipchat logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-http (2.0.5) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-http_client (>= 2.0.2, < 3.0.0) manticore (< 0.5.0) logstash-output-irc (2.0.2) cinch logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-juggernaut (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) redis logstash-output-kafka (2.0.1) jruby-kafka (>= 1.4.0, < 2.0.0) logstash-codec-json logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-lumberjack (2.0.4) jls-lumberjack (>= 0.0.26) logstash-core (>= 2.0.0.beta2, < 3.0.0) stud logstash-output-nagios (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-nagios_nsca (2.0.3) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-null (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-opentsdb (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-pagerduty (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-pipe (2.0.2) logstash-codec-plain logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-rabbitmq (3.0.6-java) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-rabbitmq_connection (>= 2.2.0, < 3.0.0) logstash-output-redis (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) redis stud logstash-output-s3 (2.0.3) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws stud (~> 0.0.22) logstash-output-sns (3.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws (>= 1.0.0) logstash-output-sqs (2.0.2) aws-sdk logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-mixin-aws stud logstash-output-statsd (2.0.4) logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-input-generator statsd-ruby (= 1.2.0) logstash-output-stdout (2.0.3) logstash-codec-line logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-tcp (2.0.2) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) stud logstash-output-udp (2.0.2) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-output-xmpp (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) xmpp4r (= 0.5) logstash-output-zeromq (2.0.2) ffi-rzmq (~> 2.0.4) logstash-codec-json logstash-core (>= 2.0.0.beta2, < 3.0.0) logstash-patterns-core (2.0.2) logstash-core (>= 2.0.0.beta2, < 3.0.0) lru_redux (1.1.0) mail (2.6.3) mime-types (>= 1.16, < 3) manticore (0.4.4-java) march_hare (2.11.0-java) memoizable (0.4.2) thread_safe (~> 0.3, >= 0.3.1) method_source (0.8.2) metriks (0.9.9.7) atomic (~> 1.0) avl_tree (~> 1.2.0) hitimes (~> 1.1) mime-types (2.99) mimemagic (0.3.0) minitar (0.5.4) msgpack-jruby (1.4.1-java) multi_json (1.11.2) multi_xml (0.5.5) multipart-post (2.0.0) murmurhash3 (0.1.6-java) naught (1.1.0) netrc (0.11.0) nokogiri (1.6.7-java) octokit (3.8.0) sawyer (~> 0.6.0, >= 0.5.3) polyglot (0.3.5) pry (0.10.3-java) coderay (~> 1.1.0) method_source (~> 0.8.1) slop (~> 3.4) spoon (~> 0.0) puma (2.11.3-java) rack (>= 1.1, < 2.0) rack (1.6.4) rake (10.4.2) redis (3.2.2) rest-client (1.8.0) http-cookie (>= 1.0.2, < 2.0) mime-types (>= 1.16, < 3.0) netrc (~> 0.7) rspec (3.1.0) rspec-core (~> 3.1.0) rspec-expectations (~> 3.1.0) rspec-mocks (~> 3.1.0) rspec-core (3.1.7) rspec-support (~> 3.1.0) rspec-expectations (3.1.2) diff-lcs (>= 1.2.0, < 2.0) rspec-support (~> 3.1.0) rspec-mocks (3.1.3) rspec-support (~> 3.1.0) rspec-support (3.1.2) rspec-wait (0.0.8) rspec (>= 2.11, < 3.5) ruby-maven (3.3.8) ruby-maven-libs (~> 3.3.1) ruby-maven-libs (3.3.3) rubyzip (1.1.7) rufus-scheduler (3.0.9) tzinfo sawyer (0.6.0) addressable (~> 2.3.5) faraday (~> 0.8, < 0.10) sequel (4.29.0) simple_oauth (0.3.1) simplecov (0.11.1) docile (~> 1.1.0) json (~> 1.8) simplecov-html (~> 0.10.0) simplecov-html (0.10.0) slop (3.6.0) snmp (1.2.0) spoon (0.0.4) ffi statsd-ruby (1.2.0) stud (0.0.22) term-ansicolor (1.3.2) tins (~> 1.0) thor (0.19.1) thread_safe (0.3.5-java) tins (1.6.0) treetop (1.4.15) polyglot polyglot (>= 0.3.1) twitter (5.15.0) addressable (~> 2.3) buftok (~> 0.2.0) equalizer (= 0.0.10) faraday (~> 0.9.0) http (>= 0.4, < 0.10) http_parser.rb (~> 0.6.0) json (~> 1.8) memoizable (~> 0.4.0) naught (~> 1.0) simple_oauth (~> 0.3.0) tzinfo (1.2.2) thread_safe (~> 0.1) unf (0.1.4-java) user_agent_parser (2.3.0) win32-eventlog (0.6.5) ffi xml-simple (1.1.5) xmpp4r (0.5)

PLATFORMS java

DEPENDENCIES benchmark-ips ci_reporter_rspec (= 1.0.0) coveralls file-dependencies (= 0.1.6) flores (~> 0.0.6) fpm (~> 1.3.3) gems (~> 0.8.3) logstash-codec-collectd logstash-codec-dots logstash-codec-edn logstash-codec-edn_lines logstash-codec-es_bulk logstash-codec-fluent logstash-codec-graphite logstash-codec-json logstash-codec-json_lines logstash-codec-line logstash-codec-msgpack logstash-codec-multiline logstash-codec-netflow logstash-codec-oldlogstashjson logstash-codec-plain logstash-codec-rubydebug logstash-core (= 2.1.1) logstash-devutils (~> 0) logstash-filter-anonymize logstash-filter-checksum logstash-filter-clone logstash-filter-csv logstash-filter-date logstash-filter-dns logstash-filter-drop logstash-filter-fingerprint logstash-filter-geoip logstash-filter-grok logstash-filter-json logstash-filter-kv logstash-filter-metrics logstash-filter-multiline logstash-filter-mutate logstash-filter-ruby logstash-filter-sleep logstash-filter-split logstash-filter-syslog_pri logstash-filter-throttle logstash-filter-urldecode logstash-filter-useragent logstash-filter-uuid logstash-filter-xml logstash-input-beats logstash-input-couchdb_changes logstash-input-elasticsearch logstash-input-eventlog logstash-input-exec logstash-input-file logstash-input-ganglia logstash-input-gelf logstash-input-generator logstash-input-graphite logstash-input-heartbeat logstash-input-http logstash-input-imap logstash-input-irc logstash-input-jdbc logstash-input-kafka logstash-input-log4j logstash-input-log4j2 (= 5.2)! logstash-input-lumberjack logstash-input-pipe logstash-input-rabbitmq logstash-input-redis logstash-input-s3 logstash-input-snmptrap logstash-input-sqs logstash-input-stdin logstash-input-syslog logstash-input-tcp logstash-input-twitter logstash-input-udp logstash-input-unix logstash-input-xmpp logstash-input-zeromq logstash-output-cloudwatch logstash-output-csv logstash-output-elasticsearch logstash-output-email logstash-output-exec logstash-output-file logstash-output-ganglia logstash-output-gelf logstash-output-graphite logstash-output-hipchat logstash-output-http logstash-output-irc logstash-output-juggernaut logstash-output-kafka logstash-output-lumberjack logstash-output-nagios logstash-output-nagios_nsca logstash-output-null logstash-output-opentsdb logstash-output-pagerduty logstash-output-pipe logstash-output-rabbitmq logstash-output-redis logstash-output-s3 logstash-output-sns logstash-output-sqs logstash-output-statsd logstash-output-stdout logstash-output-tcp logstash-output-udp logstash-output-xmpp logstash-output-zeromq octokit (= 3.8.0) rspec (~> 3.1.0) rubyzip (~> 1.1.7) simplecov stud (~> 0.0.21) tins (= 1.6)

[SergiiOliinyk]

Gemfile.jruby

[SergiiOliinyk]

@estanislaobosch @ogg1e What version of Ruby and JRuby should be used for compiling etc...?

[estanislaobosch]

jruby -version jruby 9.0.4.0 (2.2.2) 2015-11-12 b9fb7aa Java HotSpot(TM) 64-Bit Server VM 25.72-b15 on 1.8.0_72-b15 +jit [linux-amd64]

I don't have ruby installed

[SergiiOliinyk]

@estanislaobosch Aha, may be i need uninstall Ruby and install Jruby 1.9 cause i have 1.7,24

[estanislaobosch]

I think you can do everything just putting jruby at the front so that you don't have to uninstall ruby

[SergiiOliinyk]

@estanislaobosch What do you mean by put in the front :?

[SergiiOliinyk]

@estanislaobosch LoadError: no such file to load -- clamp require at org/jruby/RubyKernel.java:937 - is i use JRuby 9.0.5.0

[SergiiOliinyk]

@estanislaobosch I've managed to work it. So u need to remove Ruby and install JRuby 9.0.3

[estanislaobosch]

What I meant that for every command you can do it placing jruby in front so that you are sure it is using jruby instead of ruby, i.e. "jruby rake vendor" instead of "rake vendor", this way you don't need to uninstall ruby.

[SergiiOliinyk]

@estanislaobosch Many thanks

[bartlaarhoven]

I've taken the liberty to push it as a different gem to Rubygems. You can now use the regular command: $LS_HOME/bin/plugin install logstash-input-log4j2-logstash2 so with logstash-input-log4j2-logstash2 instead of logstash-input-log4j2. If @jurmous wants to push the new version to RubyGems himself and wants me to, I'll delete mine again. I just needed this quickly. ;-)

[bratwurzt]

@bartlaarhoven Thank you. Really, you get a beer, if we ever meet.

[ph]

Hello, everyone

Ive been redirected here from https://github.com/logstash-plugins/logstash-input-log4j2/issues/2 to here. The published gems on rubygems doesn't contains the correct gem logstash constrains to work on 2.3.X.

With 2.3.0 we started using a specific gem, logstash-core-plugin-api` to handle the breaking changes in the event api.

You have to change this line https://github.com/jurmous/logstash-log4j2/blob/master/logstash-input-log4j2.gemspec#L26

to this https://github.com/logstash-plugins/logstash-filter-csv/blob/master/logstash-filter-csv.gemspec#L23

This will make sure the plugin work with 2.X and it will be nice to release a new version of the gems. Logstash core cannot publish it.

[dashjim]

Hi everyone who want to install this plugin for logstash 2.1 - 3.0 please follow ph's suggestion to change that file first and then follow steps from @estanislaobosch. It is working for me.

A workaround to solve this you can 0- execute 'gem install logstash-devutils' 1- clone the master branch to path_to_plugin_dir 2- in path_to_plugin_dir execute 'rake vendor' 3- in path_to_plugin_dir execute 'gem build logstash-input-log4j2.gemspec' 4- in path_to_logstash_dir execute './bin/plugin install path_to_plugin_dir/logstash-input-log4j2-5.2-java.gem