Hi, I've a server hosting several sites containing multiple IIS logs from each site in structure like this: D:\IISLogs\Customer1\logs D:\IISLogs\Customer2\logs D:\IISLogs\Customer3\logs I'm using filebeat with IIS module to send the logs to logstash and then output them to elasticsearch. I wou…

You are missing the percentage in front of the {customername}, it should look like below: tokenizer: "%{}\%{customername}\%{}" Every field you want to recognise should be of the form %{}

Discuss the Elastic Stack

Differentiate between logs based on log.file.path

Elastic Stack Beats

system (system) Closed June 20, 2019, 5:28am 10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Extract fields from a log path in logstash Logstash	3	334	July 19, 2018
Can we extract folder and file out of log.file.path field? Kibana	5	2976	March 3, 2020
Help with 'dissect_parsing_error' on 'log file path' Beats filebeat	2	4378	August 30, 2020
How to customize a filebeat to parse a log? Beats filebeat	3	12347	October 16, 2020
Allow Filebeat to add folder names as fields Beats	4	1514	June 7, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Differentiate between logs based on log.file.path

Related topics