Avro codec plugin

  • Plugin version: v3.2.3
  • Released on: 2017-11-07
  • Changelog

For other versions, see theVersioned plugin docs.

Getting Help

For questions about the plugin, open a topic in the Discuss forums. For bugs or feature requests, open an issue in Github.For the list of Elastic supported plugins, please consult the Elastic Support Matrix.

Description

Read serialized Avro records as Logstash events

This plugin is used to serialize Logstash events asAvro datums, as well as deserializing Avro datums intoLogstash events.

Encoding

This codec is for serializing individual Logstash eventsas Avro datums that are Avro binary blobs. It does not encodeLogstash events into an Avro file.

Decoding

This codec is for deserializing individual Avro records. It is not for readingAvro files. Avro files have a unique format that must be handled upon input.

Usage

Example usage with Kafka input.

input {  kafka {    codec => avro {        schema_uri => "/tmp/schema.avsc"    }  }}filter {  ...}output {  ...}

Avro Codec Configuration Options

Setting Input type Required

schema_uri

string

Yes

tag_on_failure

boolean

No

 

schema_uri

  • This is a required setting.
  • Value type is string
  • There is no default value for this setting.

schema path to fetch the schema from.This can be a http or file scheme URIexample:

  • http - http://example.com/schema.avsc
  • file - /path/to/schema.avsc

tag_on_failure

  • Value type is boolean
  • Default value is false

tag events with _avroparsefailure when decode fails