vasilev
(V. Vasilev)
January 13, 2021, 3:01pm
1
Hello,
I have read this information:
I am trying to send different log files on different logstash ports on logstash ..like one on 5044 and other on 5043
Here is my filebeat config . can someone help
#=========================== Filebeat prospectors =============================
filebeat.prospectors:
- input_type: log
# Paths that should be crawled and fetched. Glob based paths.
paths:
- /etc/filebeat/download.2017-06-16-1125-1224.log
# tail_files: true
multiline.pattern: '^\[[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline…
Can I add a tag in ibmmq module ? tried with:
errorlog:
enabled: true
var.paths: ["/var/mqm/qmgrs/*/errors/*.json"]
# json.tags: ibmmq
# tags: ["ibmmq", json]
and after that in logstash:
filter {
# if "ibmmq" in [tags] {
json {
source => "message"
target => "message"
}
# }
}
Nothing is happening in this way.
If I add # - all is fine..
thank you
vasilev
(V. Vasilev)
January 14, 2021, 9:25am
2
I have added :
if [event][module] == "ibmmq" {
...
}
hopefully, this is the correct way - to read the fields from the incoming json.
system
(system)
Closed
February 11, 2021, 11:25am
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.