Create filter with this content .help me

Elastic Stack Logstash
1

#Software: Microsoft Internet Information Services 10.0
#Version: 1.0
#Date: 2018-06-10 09:58:55
#Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem sc-status sc-win32-status sc-substatus x-session x-fullpath
2018-06-10 09:58:55 192.168.1.32 - 192.168.1.27 21 ControlChannelOpened - - 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -
2018-06-10 09:58:55 192.168.1.32 - 192.168.1.27 21 USER anonymous 331 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -
2018-06-10 09:58:55 192.168.1.32 - 192.168.1.27 21 PASS anonymous@example.com 230 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 /
2018-06-10 09:58:55 192.168.1.32 - 192.168.1.27 21 SYST - 215 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -
2018-06-10 09:58:55 192.168.1.32 - 192.168.1.27 21 FEAT - 211 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -
2018-06-10 09:59:03 192.168.1.32 - 192.168.1.27 21 OPTS UTF8+ON 200 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -
2018-06-10 09:59:03 192.168.1.32 - 192.168.1.27 21 PWD - 257 0 0 ca3aa5f6-31a7-4119-ad57-7ab3f1a1a849 -

2

@ngocky:

  • what are you trying to accomplish?
  • what have you tried so far?
  • how did that differ from your expectations?
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.