The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
115 views

F5 High Speed Logging and Logstash GROK

Im trying to format logs straight from our F5 using HSL and Logstash. I've copied the example configuration exactly from the site as it contains the majority of the information I wanted logstash ...
0
votes
0answers
55 views

Logstash Custom Grok for JSON Blocks

I've got a custom log format as follows: %DATE %TIME subscribers [{json-block}], message {json-block} heres an example: 2016-01-17 01:51:56 subscribers ...
0
votes
1answer
493 views

Logstash grok match pattern not working even though grok constructor says it is okay

I've been building some grok patterns to parse the /var/log/secure log file and everything has been working fine. I create the grok patterns at http://grokconstructor.appspot.com/ and even then test ...
0
votes
0answers
152 views

Fluentd : How to add custom tags to log entries sent to elasticsearch

I am quite new to Fluentd and I was wondering if there was a way to get the following logstash configuration applied to fluentd filter { grok { patterns_dir => [ ...
1
vote
1answer
416 views

Grok Issue with Multiple IP's in NginX Logstash

i've got an issue with logging from my webservers, which has an elb and then a varnish layer in front of nginx layer. varnish is setup properly for X-Forwarded-For and logs come through normally with ...
0
votes
1answer
478 views

Logstash is not processing MySQL logs correctly

As you can see, the message is not just the message, but also contains the date and timestamp. . . This is the MySQL Log: /var/log/mysql/error.log 150630 9:01:29 [Warning] Access denied for user ...
0
votes
1answer
128 views

Logstash matching ceph client and server separation

So I have a fresh logstash install and I am trying to deploy logstash to get a handle on the logs. I am going through and will eventually segment the logstash filters based on subsystem and ...
4
votes
1answer
2k views

nginx error log Grok pattern

I am having trouble getting the following nginx error log message to parse in the grok debugger. I have a feeling there is a stupid trick that I should use but can't figure out what it may be. ...
1
vote
1answer
439 views

Logstash continued grokking after _grokparsefailure

Goodday, (using logstash 1.4.2) I'm trying to do something like: filter { if type == "feed" { grok { match => [ "message", "%{COMBINEDAPACHELOGS}" ] add_tag => [ "grokked", ...
0
votes
1answer
1k views

Logstash Grok Pattern

First of all I apologize for this,I am pretty bad in regular-expression and try to wrote custom pattern(as I am unable to find something in existing grok pattern or may be I am missing something) for ...