when i start logstash using bin/logtash -f test.config, it shows the message as title
ps. i have removed all .sincedb_* files and the logstash version is 2.0
test.config
`input {
file {
path => "/data/tmp/elktest/tollog/pqr/"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
grok {
match => {
"message" => "%{TIMESTAMP_ISO8601:eventtime},%{WORD:Type},Item=(%{GREEDYDATA:Item}),%{GREEDYDATA:CID},TotalPass=%{NUMBER:TotalPass},TotalFail=%{NUMBER:TotalFail},SpreadFail=%{NUMBER:SpreadFail},RollingAvgFail=%{NUMBER:RollingAvgFail},%{GREEDYDATA:RollingAvgSMM},%{GREEDYDATA:RollingAvgLMM},%{GREEDYDATA:RollingAvgDynMoves},%{GREEDYDATA:RATRejects},%{GREEDYDATA:ETRejects},%{GREEDYDATA:SingleContFail},%{GREEDYDATA:SingleContFailAtCnsctv},BMKFail=%{NUMBER:BMKFail},,"
}
}
date {
match => ["eventtime","ISO8601"]
hi warkolm! i can't start the logstash,when run bin/logstash command,logstash can't parse the docuemnt and show :Default settings used: Filter workers: 2
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.