Top "Logstash" questions

Logstash is a tool for managing events and logs.

Removing old indices in elasticsearch

I have the many of my logs indexed in logstash-Year-Week format. That is if i want to delete indices older …

elasticsearch logstash elasticsearch-plugin
How to process multiline log entry with logstash filter?

Background: I have a custom generated log file that has the following pattern : [2014-03-02 17:34:20] - 127.0.0.1|ERROR| E:\xampp\htdocs\…

regex logstash multiline logstash-grok
Logstash grok multiline message

My logs are formatted like this: 2014-06-19 02:26:05,556 INFO ok 2014-06-19 02:27:05,556 ERROR message:space exception at line 85 solution:increase …

regex logstash
Import JSON Files into Logstash + Elasticsearch + Kibana

So, I have a web platform that prints a JSON file per request containing some log data about that request. …

json logging elasticsearch logstash kibana
Regex query syntax examples in kibana

I am trying to find the different kinds of syntax I can give in regex type of query through kibana, …

regex elasticsearch logstash kibana
Change default mapping of string to "not analyzed" in Elasticsearch

In my system, the insertion of data is always done through csv files via logstash. I never pre-define the mapping. …

elasticsearch logstash logstash-grok elasticsearch-mapping
Logstash Grok Filter Apache Access Log

I have been looking around here and there, but could not find the working resolution. I try to use Grok …

filter logstash logstash-grok
Logstash replace @timestamp with syslog date

I'm a bit confused. I'm trying to pull out the syslog date (backfilling the logstash) and replace the @timestamp with …

filter timestamp logstash syslog logstash-grok
How to add a numeric filter on kibana dashboard?

I have a field that contains numbers. I want a filter that shows all logs that are less than a …

elasticsearch logstash kibana
How to parse json in logstash /grok from a text file line?

I have a logfile which looks like this ( simplified) Logline sample MyLine data={"firstname":"bob","lastname":"the builder"} I'd like …

elasticsearch logstash logstash-grok