The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
21 views

Logstash Custom Grok for JSON Blocks

I've got a custom log format as follows: %DATE %TIME subscribers [{json-block}], message {json-block} heres an example: 2016-01-17 01:51:56 subscribers ...
0
votes
1answer
92 views

Logstash grok match pattern not working even though grok constructor says it is okay

I've been building some grok patterns to parse the /var/log/secure log file and everything has been working fine. I create the grok patterns at http://grokconstructor.appspot.com/ and even then test ...
0
votes
0answers
93 views

Fluentd : How to add custom tags to log entries sent to elasticsearch

I am quite new to Fluentd and I was wondering if there was a way to get the following logstash configuration applied to fluentd filter { grok { patterns_dir => [ ...
1
vote
1answer
266 views

Grok Issue with Multiple IP's in NginX Logstash

i've got an issue with logging from my webservers, which has an elb and then a varnish layer in front of nginx layer. varnish is setup properly for X-Forwarded-For and logs come through normally with ...
0
votes
1answer
297 views

Logstash is not processing MySQL logs correctly

As you can see, the message is not just the message, but also contains the date and timestamp. . . This is the MySQL Log: /var/log/mysql/error.log 150630 9:01:29 [Warning] Access denied for user ...
0
votes
1answer
109 views

Logstash matching ceph client and server separation

So I have a fresh logstash install and I am trying to deploy logstash to get a handle on the logs. I am going through and will eventually segment the logstash filters based on subsystem and ...
4
votes
1answer
2k views

nginx error log Grok pattern

I am having trouble getting the following nginx error log message to parse in the grok debugger. I have a feeling there is a stupid trick that I should use but can't figure out what it may be. ...
1
vote
1answer
365 views

Logstash continued grokking after _grokparsefailure

Goodday, (using logstash 1.4.2) I'm trying to do something like: filter { if type == "feed" { grok { match => [ "message", "%{COMBINEDAPACHELOGS}" ] add_tag => [ "grokked", ...
0
votes
1answer
777 views

Logstash Grok Pattern

First of all I apologize for this,I am pretty bad in regular-expression and try to wrote custom pattern(as I am unable to find something in existing grok pattern or may be I am missing something) for ...