{"action":"created","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/13","repository_url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/13/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/13/events","html_url":"https://github.com/logstash-plugins/logstash-codec-cloudtrail/issues/13","id":200653527,"number":13,"title":"Cloudtrail codec error after 3.0.0","user":{"login":"adeliarisk","id":686755,"avatar_url":"https://avatars2.githubusercontent.com/u/686755?v=4","gravatar_id":"","url":"https://api.github.com/users/adeliarisk","html_url":"https://github.com/adeliarisk","followers_url":"https://api.github.com/users/adeliarisk/followers","following_url":"https://api.github.com/users/adeliarisk/following{/other_user}","gists_url":"https://api.github.com/users/adeliarisk/gists{/gist_id}","starred_url":"https://api.github.com/users/adeliarisk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adeliarisk/subscriptions","organizations_url":"https://api.github.com/users/adeliarisk/orgs","repos_url":"https://api.github.com/users/adeliarisk/repos","events_url":"https://api.github.com/users/adeliarisk/events{/privacy}","received_events_url":"https://api.github.com/users/adeliarisk/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-01-13T15:13:48Z","updated_at":"2018-03-12T12:48:23Z","closed_at":"2018-03-12T12:48:23Z","author_association":"NONE","body":"Hi - posted this issue on the discussion boards at Elastic, but never got a response: https://discuss.elastic.co/t/cloudtrail-codec-error-after-new-release/70478\r\n\r\nHi - I just downloaded and installed the newly-released cloudtrail codec. Command to install was:\r\n./bin/logstash-plugin install logstash-codec-cloudtrail\r\n\r\nThe only change I made in my .conf file was to go from \"json\" codec to \"cloudtrail\" codec in input. The pipeline that was working previously but is now broken.\r\n\r\nHere are the errors I receive over and over:\r\n\r\n20:02:42.044 [[main]<s3] ERROR logstash.pipeline - A plugin had an unrecoverable error. Will restart this plugin.\r\n  Plugin: <LogStash::Inputs::S3 bucket=>\"redacted\", access_key_id=>\"redacted\", secret_access_key=>\"redacted\", codec=><LogStash::Codecs::CloudTrail id=>\"cloudtrail_82d45f40-1490-457e-9407-47d1411e533b\", enable_metric=>true, charset=>\"UTF-8\">, region=>\"us-west-2\", id=>\"redacted\", enable_metric=>true, delete=>false, interval=>60, temporary_directory=>\"/tmp/logstash\">\r\nOperating system: ubuntu 16.04\r\nElasticsearch version: 5.1.1\r\n\r\nHere's my .conf file:\r\n\r\ninput {\r\ns3 {\r\nbucket => 'redacted'\r\naccess_key_id => 'redacted'\r\nsecret_access_key => 'redacted'\r\ncodec => \"cloudtrail\"\r\nregion => \"us-west-2\"\r\n}\r\n}\r\n\r\nfilter {\r\ngeoip {\r\nsource => \"sourceIPAddress\"\r\n}\r\n}\r\n\r\noutput {\r\nelasticsearch {\r\nhosts => \"redacted:9243\"\r\nuser => \"redacted\"\r\npassword => \"redacted\"\r\nssl => true\r\nindex => \"redacted-%{+YYYY.MM.dd}\"\r\ndocument_type => \"redacted\"\r\n}\r\n}"},"comment":{"url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/comments/372297974","html_url":"https://github.com/logstash-plugins/logstash-codec-cloudtrail/issues/13#issuecomment-372297974","issue_url":"https://api.github.com/repos/logstash-plugins/logstash-codec-cloudtrail/issues/13","id":372297974,"user":{"login":"jsvd","id":31809,"avatar_url":"https://avatars3.githubusercontent.com/u/31809?v=4","gravatar_id":"","url":"https://api.github.com/users/jsvd","html_url":"https://github.com/jsvd","followers_url":"https://api.github.com/users/jsvd/followers","following_url":"https://api.github.com/users/jsvd/following{/other_user}","gists_url":"https://api.github.com/users/jsvd/gists{/gist_id}","starred_url":"https://api.github.com/users/jsvd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsvd/subscriptions","organizations_url":"https://api.github.com/users/jsvd/orgs","repos_url":"https://api.github.com/users/jsvd/repos","events_url":"https://api.github.com/users/jsvd/events{/privacy}","received_events_url":"https://api.github.com/users/jsvd/received_events","type":"User","site_admin":false},"created_at":"2018-03-12T12:48:23Z","updated_at":"2018-03-12T12:48:23Z","author_association":"CONTRIBUTOR","body":"https://github.com/logstash-plugins/logstash-codec-cloudtrail/pull/18 has been merged, closing this"}}
{"actor":{"display_login":"jsvd"}}