Desired output not achieved while logs parsing

Elastic Stack Logstash
1

I have system log file for one of my application having pattern like below , i want to capture only the lines having sql exception like: +java.sql.SQLException: ORA-*** to be shown in kibana while rest of log lines are drop and not captured in message.

app.data.2019-08-28:08:53:49,129 INFO [string] (appsys_11) +java.sql.SQLException: ORA-28001: the password has expired
app.data.2019-08-28:08:53:49,129 INFO [string] (appsys_11) Caused by: java.sql.SQLException: Exception occurred while getting connection: oracle.ucp.UniversalConnectionPoolException: Cannot get Connection from Datasource: java.sql.SQLException: ORA-28001: the password has expired
app.data.2019-08-28:08:53:49,130 INFO [string] (appsys_11) Caused by: oracle.ucp.UniversalConnectionPoolException: Cannot get Connection from Datasource: java.sql.SQLException: ORA-28001: the password has expired
app.data.2019-08-28:08:53:49,130 INFO [string] (appsys_11) Caused by: java.sql.SQLException: ORA-28001: the password has expired
app.data.2019-08-28:08:53:49,134 INFO [string] (appCommandsys_15) +java.sql.SQLException: Exception occurred while getting connection: oracle.ucp.UniversalConnectionPoolException: Cannot get Connection from Datasource: java.sql.SQLException: ORA-28001: the password has expired
app.data.2019-08-28:08:53:49,134 INFO [string] (appCommandsys_15) +oracle.ucp.UniversalConnectionPoolException: Cannot get Connection from Data

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.