Top "Logstash-grok" questions

Grok is an abstraction on top of regular expressions to allow easy parsing of unstructured text into structured and queryable form.

Multiple Grok Filters not storing first filter match record

I am using Logstash to parse postfix logs. I am mainly focused to get bounced email logs from postfix logs, …

logstash logstash-grok
What should be the logstash grok filter for this log4j log?

I've been asked to consolidate our log4j log files (NOT using Socket calls for now) into a Logstash JSON …

log4j logstash logstash-grok
Syslog forwared HAProxy logs filtering in Logstash

I'm having issues understanding how to do this correctly. I have the following Logstash config: input { lumberjack { port => 5000 host =&…

logstash logstash-grok logstash-forwarder
have a grok filter create nested fields as a result

I have a drupal watchdog syslog file that I want to parse into essentially two nested fields, the syslog part …

logstash syslog logstash-grok
how to replace logstash @timestamp with log timestamp

My time stamp in the logs are in the format as below 2016-04-07 18:11:38.169 which is yyyy-MM-dd HH:mm:ss.…

logstash logstash-grok
logstash geoip.location mapping to geo_point not working

I can see in my default mappings geoip.location is mapped to geo_point type: GET myserver:9200/_template { "logstash": { "order": 0, "…

elasticsearch geolocation logstash elastic-stack logstash-grok
Filebat/Logstash remove unwanted fields & values from output

My Filebeat configuration is very simple - - input_type: log paths: - C:\log\FilebeatInputTest.txt output.logstash: hosts: ["…

elasticsearch logstash logstash-grok filebeat
Selective parsing of csv file using logstash

I am trying to feed data into elasticsearch from csv files, through logstash. These csv files contain the first row …

csv logstash logstash-grok