i have recently installed ELK on a windows machine.
I would like to parse and create some sort of statistics out of a text based log file that resides on a Linux machine, but as that folder is made as a share, it is accessible from a windows machine.
Having issues, understanding what should be the path in the configuration file.
Also having issues with the way ELK is running, I cannot seem to add indexes. I don't have or see the Create button...the list is big.
kindly assist, starting with the configuration setup, then moving on to other things.
Here is my logstash.conf:
input {
file {
path => "//172.16.36.31/Shares/ift20110923.log"
start_position => "beginning"
type => "logs"
sincedb_path => "/dev/null"
}
}
filter {
csv {
columns => [
"Camera",
"Dev"
]
separator => ","
}
}
output {
elasticsearch {
hosts => "localhost:9200"
}
stdout {codec => rubydebug}
}
Appreciate it, thanks.