logstash-output-elasticsearch 4.1.3-java → 5.1.0-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 98d7cc25afb0c139cbf7adda1638712c99b2b34e
-  data.tar.gz: b9282f9c32662a1ad98205a6a7c7feb3a1f1a807
+  metadata.gz: 8e747b0ecd3b13e55c194f3baec4991095a6fe35
+  data.tar.gz: dce871709afbdaf6d303a273d7743dc92b964212
 SHA512:
-  metadata.gz: d4ef1719f91ad38f76e5a62f191f1cf70515b946cb0928c0ae8f51cda01993ef889c2311d3fd3687e7bd9cc77b1e5301d548bf4752e8841417c6f50b29e9e4ab
-  data.tar.gz: d51521544af110612bf369562d8e1374c49d69f2535a083e8128824f81cccc3923e51e74db3f175ea922d6f578ae407c512df41c7be501fa525f4889d2ead3e4
+  metadata.gz: 8ec8d71aea257c1bdb59122e45ac0472681dd91efd074b360678e273c7bdd15ef7211e2984a2bac84b3ebb4b2b6277c456451abf300f222e632680f40d3f2a6a
+  data.tar.gz: f315ec0e2e6f5ed3b9fc91ec30082a9bc2cf5910def149539ba4bf62def32f45b084fd26c0e948f47f142a5ca6d86496bd2cba7d9d41aa717c6af66b6396f11e

data/CHANGELOG.md

@@ -1,5 +1,21 @@
+## 5.1.0
+- Add check_connection_timeout parameter (default 10m)
+- Set default timeout to 60s
+
+## 5.0.0
+- Breaking Change: Index template for 5.0 has been changed to reflect Elasticsearch's mapping changes. Most importantly,
+the subfield for string multi-fields has changed from `.raw` to `.keyword` to match ES default behavior. ([#386](https://github.com/logstash-plugins/logstash-output-elasticsearch/issues/386))
+
+**Users installing ES 5.x and LS 5.x**
+This change will not affect you and you will continue to use the ES defaults.
+
+**Users upgrading from LS 2.x to LS 5.x with ES 5.x**
+LS will not force upgrade the template, if `logstash` template already exists. This means you will still use
+`.raw` for sub-fields coming from 2.x. If you choose to use the new template, you will have to reindex your data after
+the new template is installed.
+
 ## 4.1.3
-  - Relax constraint on logstash-core-plugin-api to >= 1.60 <= 2.99
+- Relax constraint on logstash-core-plugin-api to >= 1.60 <= 2.99
 
 ## 4.1.2
 

data/lib/logstash/outputs/elasticsearch.rb

@@ -20,6 +20,19 @@ require "uri" # for escaping user input
 #
 # You can learn more about Elasticsearch at <https://www.elastic.co/products/elasticsearch>
 #
+# ==== Template management for Elasticsearch 5.x
+# Index template for this version (Logstash 5.0) has been changed to reflect Elasticsearch's mapping changes in version 5.0. 
+# Most importantly, the subfield for string multi-fields has changed from `.raw` to `.keyword` to match ES default 
+# behavior.
+#
+# ** Users installing ES 5.x and LS 5.x **
+# This change will not affect you and you will continue to use the ES defaults.
+#
+# ** Users upgrading from LS 2.x to LS 5.x with ES 5.x **
+# LS will not force upgrade the template, if `logstash` template already exists. This means you will still use 
+# `.raw` for sub-fields coming from 2.x. If you choose to use the new template, you will have to reindex your data after 
+# the new template is installed.
+#
 # ==== Retry Policy
 #
 # The retry policy has changed significantly in the 2.2.0 release.
@@ -131,7 +144,7 @@ class LogStash::Outputs::ElasticSearch < LogStash::Outputs::Base
 
   # Set the timeout, in seconds, for network operations and requests sent Elasticsearch. If
   # a timeout occurs, the request will be retried.
-  config :timeout, :validate => :number
+  config :timeout, :validate => :number, :default => 60
 
   # Set the Elasticsearch errors in the whitelist that you don't want to log. 
   # A useful example is when you want to skip all 409 errors
@@ -160,6 +173,16 @@ class LogStash::Outputs::ElasticSearch < LogStash::Outputs::Base
   # Resurrection is the process by which backend endpoints marked 'down' are checked
   # to see if they have come back to life
   config :resurrect_delay, :validate => :number, :default => 5
+  
+  # How long to wait before checking if the connection is stale before executing a request on a connection using keepalive.
+  # You may want to set this lower, if you get connection errors regularly
+  # Quoting the Apache commons docs (this client is based Apache Commmons):
+  # 'Defines period of inactivity in milliseconds after which persistent connections must
+  # be re-validated prior to being leased to the consumer. Non-positive value passed to
+  # this method disables connection validation. This check helps detect connections that
+  # have become stale (half-closed) while kept inactive in the pool.'
+  # See https://hc.apache.org/httpcomponents-client-ga/httpclient/apidocs/org/apache/http/impl/conn/PoolingHttpClientConnectionManager.html#setValidateAfterInactivity(int)[these docs for more info]
+  config :validate_after_inactivity, :validate => :number, :default => 10000
 
   def build_client
     @client = ::LogStash::Outputs::ElasticSearch::HttpClientBuilder.build(@logger, @hosts, params)

data/lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json

@@ -0,0 +1,95 @@
+{
+  "template" : "logstash-*",
+  "settings" : {
+    "index.refresh_interval" : "5s"
+  },
+  "mappings" : {
+    "_default_" : {
+      "_all" : {"enabled" : true, "omit_norms" : true},
+      "dynamic_templates" : [ {
+        "message_field" : {
+          "match" : "message",
+          "match_mapping_type" : "string",
+          "mapping" : {
+            "type" : "string", "index" : "analyzed", "omit_norms" : true,
+            "fielddata" : { "format" : "disabled" }
+          }
+        }
+      }, {
+        "string_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "string",
+          "mapping" : {
+            "type" : "string", "index" : "analyzed", "omit_norms" : true,
+            "fielddata" : { "format" : "disabled" },
+            "fields" : {
+              "raw" : {"type": "string", "index" : "not_analyzed", "doc_values" : true, "ignore_above" : 256}
+            }
+          }
+        }
+      }, {
+        "float_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "float",
+          "mapping" : { "type" : "float", "doc_values" : true }
+        }
+      }, {
+        "double_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "double",
+          "mapping" : { "type" : "double", "doc_values" : true }
+        }
+      }, {
+        "byte_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "byte",
+          "mapping" : { "type" : "byte", "doc_values" : true }
+        }
+      }, {
+        "short_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "short",
+          "mapping" : { "type" : "short", "doc_values" : true }
+        }
+      }, {
+        "integer_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "integer",
+          "mapping" : { "type" : "integer", "doc_values" : true }
+        }
+      }, {
+        "long_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "long",
+          "mapping" : { "type" : "long", "doc_values" : true }
+        }
+      }, {
+        "date_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "date",
+          "mapping" : { "type" : "date", "doc_values" : true }
+        }
+      }, {
+        "geo_point_fields" : {
+          "match" : "*",
+          "match_mapping_type" : "geo_point",
+          "mapping" : { "type" : "geo_point", "doc_values" : true }
+        }
+      } ],
+      "properties" : {
+        "@timestamp": { "type": "date", "doc_values" : true },
+        "@version": { "type": "string", "index": "not_analyzed", "doc_values" : true },
+        "geoip"  : {
+          "type" : "object",
+          "dynamic": true,
+          "properties" : {
+            "ip": { "type": "ip", "doc_values" : true },
+            "location" : { "type" : "geo_point", "doc_values" : true },
+            "latitude" : { "type" : "float", "doc_values" : true },
+            "longitude" : { "type" : "float", "doc_values" : true }
+          }
+        }
+      }
+    }
+  }
+}

data/lib/logstash/outputs/elasticsearch/{elasticsearch-template.json → elasticsearch-template-es5x.json}

@@ -5,13 +5,13 @@
   },
   "mappings" : {
     "_default_" : {
-      "_all" : {"enabled" : true, "omit_norms" : true},
+      "_all" : {"enabled" : true, "norms" : false},
       "dynamic_templates" : [ {
         "message_field" : {
           "match" : "message",
           "match_mapping_type" : "string",
           "mapping" : {
-            "type" : "string", "index" : "analyzed", "omit_norms" : true,
+            "type" : "string", "index" : "analyzed", "norms" : false,
             "fielddata" : { "format" : "disabled" }
           }
         }
@@ -20,24 +20,23 @@
           "match" : "*",
           "match_mapping_type" : "string",
           "mapping" : {
-            "type" : "string", "index" : "analyzed", "omit_norms" : true,
-            "fielddata" : { "format" : "disabled" },
+            "type" : "text", "norms" : false,
             "fields" : {
-              "raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" : 256}
+              "keyword" : { "type": "keyword" }
             }
           }
         }
       } ],
       "properties" : {
-        "@timestamp": { "type": "date" },
-        "@version": { "type": "string", "index": "not_analyzed" },
+        "@timestamp": { "type": "date", "include_in_all": false },
+        "@version": { "type": "keyword", "include_in_all": false },
         "geoip"  : {
           "dynamic": true,
           "properties" : {
             "ip": { "type": "ip" },
             "location" : { "type" : "geo_point" },
-            "latitude" : { "type" : "float" },
-            "longitude" : { "type" : "float" }
+            "latitude" : { "type" : "half_float" },
+            "longitude" : { "type" : "half_float" }
           }
         }
       }

data/lib/logstash/outputs/elasticsearch/http_client.rb

@@ -30,6 +30,11 @@ module LogStash; module Outputs; class ElasticSearch;
       template_put(name, template)
     end
 
+    def get_version
+      url, response = @pool.get("")
+      LogStash::Json.load(response.body)["version"]
+    end
+
     def bulk(actions)
       @action_count ||= 0
       @action_count += actions.size
@@ -94,6 +99,8 @@ module LogStash; module Outputs; class ElasticSearch;
 
       adapter_options[:proxy] = client_settings[:proxy] if client_settings[:proxy]
 
+      adapter_options[:check_connection_timeout] = client_settings[:check_connection_timeout] if client_settings[:check_connection_timeout]
+
       # Having this explicitly set to nil is an error
       if client_settings[:pool_max]
         adapter_options[:pool_max] = client_settings[:pool_max]

data/lib/logstash/outputs/elasticsearch/http_client_builder.rb

@@ -4,6 +4,7 @@ module LogStash; module Outputs; class ElasticSearch;
       client_settings = {
         :pool_max => params["pool_max"],
         :pool_max_per_route => params["pool_max_per_route"],
+        :check_connection_timeout => params["validate_after_inactivity"]
       }
 
       common_options = {

data/lib/logstash/outputs/elasticsearch/template_manager.rb

@@ -4,7 +4,7 @@ module LogStash; module Outputs; class ElasticSearch
     def self.install_template(plugin)
       return unless plugin.manage_template
       plugin.logger.info("Using mapping template from", :path => plugin.template)
-      template = get_template(plugin.template)
+      template = get_template(plugin.template, get_es_major_version(plugin.client))
       plugin.logger.info("Attempting to install template", :manage_template => template)
       install(plugin.client, plugin.template_name, template, plugin.template_overwrite)
     rescue => e
@@ -12,9 +12,16 @@ module LogStash; module Outputs; class ElasticSearch
     end
 
     private
+    def self.get_es_version(client)
+      client.get_version
+    end
+
+    def self.get_es_major_version(client)
+      get_es_version(client)["number"][0]
+    end
 
-    def self.get_template(path)
-      template_path = path || default_template_path
+    def self.get_template(path, es_major_version)
+      template_path = path || default_template_path(es_major_version)
       read_template_file(template_path)
     end
 
@@ -22,8 +29,10 @@ module LogStash; module Outputs; class ElasticSearch
       client.template_install(template_name, template, template_overwrite)
     end
 
-    def self.default_template_path
-      ::File.expand_path('elasticsearch-template.json', ::File.dirname(__FILE__))
+    def self.default_template_path(es_major_version)
+      template_version = es_major_version == "1" ? "2" : es_major_version
+      default_template_name = "elasticsearch-template-es#{template_version}x.json"
+      ::File.expand_path(default_template_name, ::File.dirname(__FILE__))
     end
 
     def self.read_template_file(template_path)

data/logstash-output-elasticsearch.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-output-elasticsearch'
-  s.version         = '4.1.3'
+  s.version         = '5.1.0'
   s.licenses        = ['apache-2.0']
   s.summary         = "Logstash Output to Elasticsearch"
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"

data/spec/integration/outputs/pipeline_spec.rb

@@ -1,6 +1,6 @@
 require_relative "../../../spec/es_spec_helper"
 
-describe "Ingest pipeline execution behavior", :integration => true, :version_5x => true do
+describe "Ingest pipeline execution behavior", :integration => true, :version_greater_than_equal_to_5x => true do
   subject! do
     require "logstash/outputs/elasticsearch"
     settings = {
@@ -19,7 +19,7 @@ describe "Ingest pipeline execution behavior", :integration => true, :version_5x
         {
           "grok": {
             "field": "message",
-            "pattern": "%{COMBINEDAPACHELOG}"
+            "patterns": ["%{COMBINEDAPACHELOG}"]
           }
         }
       ]

data/spec/integration/outputs/templates_5x_spec.rb

@@ -0,0 +1,93 @@
+require_relative "../../../spec/es_spec_helper"
+
+# This file is a copy of template test for 2.x. We can DRY this up later.
+describe "index template expected behavior for 5.x", :integration => true, :version_greater_than_equal_to_5x => true do
+  subject! do
+    require "logstash/outputs/elasticsearch"
+    settings = {
+      "manage_template" => true,
+      "template_overwrite" => true,
+      "hosts" => "#{get_host_port()}"
+    }
+    next LogStash::Outputs::ElasticSearch.new(settings)
+  end
+
+  before :each do
+    # Delete all templates first.
+    require "elasticsearch"
+
+    # Clean ES of data before we start.
+    @es = get_client
+    @es.indices.delete_template(:name => "*")
+
+    # This can fail if there are no indexes, ignore failure.
+    @es.indices.delete(:index => "*") rescue nil
+
+    subject.register
+
+    subject.multi_receive([
+      LogStash::Event.new("message" => "sample message here"),
+      LogStash::Event.new("somevalue" => 100),
+      LogStash::Event.new("somevalue" => 10),
+      LogStash::Event.new("somevalue" => 1),
+      LogStash::Event.new("country" => "us"),
+      LogStash::Event.new("country" => "at"),
+      LogStash::Event.new("geoip" => { "location" => [ 0.0, 0.0 ] })
+    ])
+
+    @es.indices.refresh
+
+    # Wait or fail until everything's indexed.
+    Stud::try(20.times) do
+      r = @es.search
+      insist { r["hits"]["total"] } == 7
+    end
+  end
+
+  it "permits phrase searching on string fields" do
+    results = @es.search(:q => "message:\"sample message\"")
+    insist { results["hits"]["total"] } == 1
+    insist { results["hits"]["hits"][0]["_source"]["message"] } == "sample message here"
+  end
+
+  it "numbers dynamically map to a numeric type and permit range queries" do
+    results = @es.search(:q => "somevalue:[5 TO 105]")
+    insist { results["hits"]["total"] } == 2
+
+    values = results["hits"]["hits"].collect { |r| r["_source"]["somevalue"] }
+    insist { values }.include?(10)
+    insist { values }.include?(100)
+    reject { values }.include?(1)
+  end
+
+  it "does not create .keyword field for the message field" do
+    results = @es.search(:q => "message.keyword:\"sample message here\"")
+    insist { results["hits"]["total"] } == 0
+  end
+
+  it "creates .keyword field from any string field which is not_analyzed" do
+    results = @es.search(:q => "country.keyword:\"us\"")
+    insist { results["hits"]["total"] } == 1
+    insist { results["hits"]["hits"][0]["_source"]["country"] } == "us"
+
+    # partial or terms should not work.
+    results = @es.search(:q => "country.keyword:\"u\"")
+    insist { results["hits"]["total"] } == 0
+  end
+
+  it "make [geoip][location] a geo_point" do
+    expect(@es.indices.get_template(name: "logstash")["logstash"]["mappings"]["_default_"]["properties"]["geoip"]["properties"]["location"]["type"]).to eq("geo_point")
+  end
+
+  it "aggregate .keyword results correctly " do
+    results = @es.search(:body => { "aggregations" => { "my_agg" => { "terms" => { "field" => "country.keyword" } } } })["aggregations"]["my_agg"]
+    terms = results["buckets"].collect { |b| b["key"] }
+
+    insist { terms }.include?("us")
+
+    # 'at' is a stopword, make sure stopwords are not ignored.
+    insist { terms }.include?("at")
+  end
+end
+
+

data/spec/integration/outputs/templates_spec.rb

@@ -1,6 +1,6 @@
 require_relative "../../../spec/es_spec_helper"
 
-describe "index template expected behavior", :integration => true do
+describe "index template expected behavior", :integration => true, :version_less_than_5x => true do
   subject! do
     require "logstash/outputs/elasticsearch"
     settings = {

data/spec/integration/outputs/update_spec.rb

@@ -1,6 +1,6 @@
 require_relative "../../../spec/es_spec_helper"
 
-describe "Update actions", :integration => true, :version_2x_plus => true do
+describe "Update actions", :integration => true, :version_greater_than_equal_to_2x => true do
   require "logstash/outputs/elasticsearch"
 
   def get_es_output( options={} )

data/spec/unit/outputs/elasticsearch/template_manager_spec.rb

@@ -0,0 +1,57 @@
+require "logstash/devutils/rspec/spec_helper"
+require "logstash/outputs/elasticsearch/http_client"
+require "java"
+require "json"
+
+describe LogStash::Outputs::ElasticSearch::TemplateManager do
+
+  describe ".get_es_major_version" do
+    let(:es_1x_version) { '{ "number" : "1.7.0", "build_hash" : "929b9739cae115e73c346cb5f9a6f24ba735a743", "build_timestamp" : "2015-07-16T14:31:07Z", "build_snapshot" : false, "lucene_version" : "4.10.4" }' }
+    let(:es_2x_version) { '{ "number" : "2.3.4", "build_hash" : "e455fd0c13dceca8dbbdbb1665d068ae55dabe3f", "build_timestamp" : "2016-06-30T11:24:31Z", "build_snapshot" : false, "lucene_version" : "5.5.0" }' }
+    let(:es_5x_version) { '{ "number" : "5.0.0-alpha4", "build_hash" : "b0da471", "build_date" : "2016-06-22T12:33:48.164Z", "build_snapshot" : false, "lucene_version" : "6.1.0" }' }
+    let(:client) { double("client") }
+    context "elasticsearch 1.x" do
+      before(:each) do
+        allow(client).to receive(:get_version).and_return(JSON.parse(es_1x_version))
+      end
+      it "detects major version is 1" do
+        expect(described_class.get_es_major_version(client)).to eq("1")
+      end
+    end
+    context "elasticsearch 2.x" do
+      before(:each) do
+        allow(client).to receive(:get_version).and_return(JSON.parse(es_2x_version))
+      end
+      it "detects major version is 2" do
+        expect(described_class.get_es_major_version(client)).to eq("2")
+      end
+    end
+    context "elasticsearch 5.x" do
+      before(:each) do
+        allow(client).to receive(:get_version).and_return(JSON.parse(es_5x_version))
+      end
+      it "detects major version is 5" do
+        expect(described_class.get_es_major_version(client)).to eq("5")
+      end
+    end
+  end
+
+  describe ".default_template_path" do
+    context "elasticsearch 1.x" do
+      it "chooses the 2x template" do
+        expect(described_class.default_template_path("1")).to match(/elasticsearch-template-es2x.json/)
+      end
+    end
+    context "elasticsearch 2.x" do
+      it "chooses the 2x template" do
+        expect(described_class.default_template_path("2")).to match(/elasticsearch-template-es2x.json/)
+      end
+    end
+    context "elasticsearch 5.x" do
+      it "chooses the 2x template" do
+        expect(described_class.default_template_path("5")).to match(/elasticsearch-template-es5x.json/)
+      end
+    end
+  end
+
+end

data/spec/unit/outputs/elasticsearch_spec.rb

@@ -279,4 +279,20 @@ describe "outputs/elasticsearch" do
       end
     end
   end
+
+  describe "stale connection check" do
+    let(:validate_after_inactivity) { 123 }
+    subject(:eso) { LogStash::Outputs::ElasticSearch.new("validate_after_inactivity" => validate_after_inactivity) }
+
+    before do
+      allow(::Manticore::Client).to receive(:new).with(any_args)
+      subject.register
+    end
+
+    it "should set the correct http client option for 'validate_after_inactivity" do
+      expect(::Manticore::Client).to have_received(:new) do |options|
+        expect(options[:check_connection_timeout]).to eq(validate_after_inactivity)
+      end
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-output-elasticsearch
 version: !ruby/object:Gem::Version
-  version: 4.1.3
+  version: 5.1.0
 platform: java
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2016-07-14 00:00:00.000000000 Z
+date: 2016-08-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -183,7 +183,8 @@ files:
 - lib/logstash/outputs/elasticsearch.rb
 - lib/logstash/outputs/elasticsearch/common.rb
 - lib/logstash/outputs/elasticsearch/common_configs.rb
-- lib/logstash/outputs/elasticsearch/elasticsearch-template.json
+- lib/logstash/outputs/elasticsearch/elasticsearch-template-es2x.json
+- lib/logstash/outputs/elasticsearch/elasticsearch-template-es5x.json
 - lib/logstash/outputs/elasticsearch/http_client.rb
 - lib/logstash/outputs/elasticsearch/http_client/manticore_adapter.rb
 - lib/logstash/outputs/elasticsearch/http_client/pool.rb
@@ -202,12 +203,14 @@ files:
 - spec/integration/outputs/retry_spec.rb
 - spec/integration/outputs/routing_spec.rb
 - spec/integration/outputs/secure_spec.rb
+- spec/integration/outputs/templates_5x_spec.rb
 - spec/integration/outputs/templates_spec.rb
 - spec/integration/outputs/update_spec.rb
 - spec/unit/http_client_builder_spec.rb
 - spec/unit/outputs/elasticsearch/http_client/manticore_adapter_spec.rb
 - spec/unit/outputs/elasticsearch/http_client/pool_spec.rb
 - spec/unit/outputs/elasticsearch/http_client_spec.rb
+- spec/unit/outputs/elasticsearch/template_manager_spec.rb
 - spec/unit/outputs/elasticsearch_proxy_spec.rb
 - spec/unit/outputs/elasticsearch_spec.rb
 - spec/unit/outputs/elasticsearch_ssl_spec.rb
@@ -234,7 +237,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project:
-rubygems_version: 2.6.3
+rubygems_version: 2.4.8
 signing_key:
 specification_version: 4
 summary: Logstash Output to Elasticsearch
@@ -251,12 +254,14 @@ test_files:
 - spec/integration/outputs/retry_spec.rb
 - spec/integration/outputs/routing_spec.rb
 - spec/integration/outputs/secure_spec.rb
+- spec/integration/outputs/templates_5x_spec.rb
 - spec/integration/outputs/templates_spec.rb
 - spec/integration/outputs/update_spec.rb
 - spec/unit/http_client_builder_spec.rb
 - spec/unit/outputs/elasticsearch/http_client/manticore_adapter_spec.rb
 - spec/unit/outputs/elasticsearch/http_client/pool_spec.rb
 - spec/unit/outputs/elasticsearch/http_client_spec.rb
+- spec/unit/outputs/elasticsearch/template_manager_spec.rb
 - spec/unit/outputs/elasticsearch_proxy_spec.rb
 - spec/unit/outputs/elasticsearch_spec.rb
 - spec/unit/outputs/elasticsearch_ssl_spec.rb