hello, I have a beats log, who are concatenate and special characters. I wanted request one of this field but I supposed my request is blocked because a bad syntax. { "user" => { "name" => "AD-WSUS$", "domain" => "BUBODEV", "id" => "S-1-5-18" }, …

[image] cassiopee: [host.ip] It still can't get the request even with that : filter { grok { match => { "[host][ip]" => "%{IPV4:clientip}" } } mutate { remove_tag => ["beats_input_codec_plain_applied"] } if [clientip] { memcached { …

Discuss the Elastic Stack

Concatenate log

Elastic Stack Logstash

cassiopee (landais) June 15, 2021, 2:48pm 3

I want correct syntax to request my field IP log

Topic		Replies	Views
Clientip field is not identified by logstash (Solved) Logstash	12	4498	July 6, 2017
Parsing custom field with logstash Logstash	2	985	March 27, 2017
NGINX Log mapping Logstash	5	1492	July 6, 2017
Erros Logstash fields Kibana Logstash	7	420	October 12, 2018
Can't get a field type IP Logstash	12	7156	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Concatenate log

Related topics