我有一个文件每5分钟存储在弹性数据库索引中，文件中的每一行都包含一个开始和结束日期，我做了配置来处理日期并计算结束日期的1天，所以当我添加一天时，我遇到了这个错误。

[ERROR] 2023-04-13 13:52:37.082 [[main]>worker10] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker4] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker7] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker0] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker12] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker5] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.082 [[main]>worker13] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.083 [[main]>worker6] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.084 [[main]>worker17] ruby - Ruby exception occurred: no implicit conversion of NilClass into String
[ERROR] 2023-04-13 13:52:37.084 [[main]>worker14] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.086 [[main]>worker9] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.086 [[main]>worker17] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker16] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker14] ruby - Ruby exception occurred: no implicit conversion of NilClass into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker11] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker1] ruby - Ruby exception occurred: no implicit conversion of LogStash::Timestamp into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker16] ruby - Ruby exception occurred: no implicit conversion of NilClass into String
[ERROR] 2023-04-13 13:52:37.087 [[main]>worker1] ruby - Ruby exception occurred: no implicit conversion of NilClass into String

logstash配置

input {
  file {
    path => "/path"
    start_position => "beginning"
    mode => "read"
    sincedb_path => "/dev/null"
  }
}
filter {
    grok {
      match => { "message" => "%{DATA}%{NUMBER:SN}%{DATA}%{NUMBER:ID}%{DATA}%{WORD:Source}%{DATA}%{TIMESTAMP_ISO8601:Start_Time}%{DATA}%{TIMESTAMP_ISO8601:End_Time}%{DATA}%{WORD:Status}" }
    }
      if "FINISHED" in [message] {
          mutate {add_field  => { "number" => 1 } } }
      if "RUNNING" in [message] {
          mutate { add_field => { "number" => 3 } }}
    date {
      match => [ "End_Time", "yyyy-MM-dd HH:mm" ]
      target => "enddate"}
    date {
      match => [ "@timestamp", "yyyy-MM-dd HH:mm" ]
      target => "mytimestamp" }
   # mutate { rename => { "mytimestamp" => "@timestamp" } }
    mutate { convert => { "mytimestamp" => "string" } }
    ruby {
       code => "
          require 'time'
          current_time = Date.parse(event.get('enddate'))
          new_time = current_time + 86400
          event.set('enddateone', new_time.iso8601(3))"
      }
      if "ABORTED" in [message]  {
        if [enddateone] >= [mytimestamp] {
          mutate { add_field => { "number" => 4 } }}
        else {
          mutate { add_field => { "number" => 2 } }}
  }
}
output {
  elasticsearch {}