I am trying to import apache error logs but unable create the pipeline via filebeat.
My grok file looks like:
input{
beats {
port => "5044"
}
}
filter{
grok{
match => { "message" => "%{TIME:timestamp} %{LOGLEVEL:LEVEL} %{GREEDYDATA:errormsg}" }
}
}
output {
elasticsearch {
hosts => ["xx.xx.xx.7:9200"]
}
}