I have below message
"2017-10-30T06:13:03.208000 0 0 0 0 0 0 0 0 0 0 GOSB_2"
corresponding Parse rule is
match => {"message" => "%{TIMESTAMP_ISO8601:samplingTimestamp} %{NUMBER:receiveVideoJitter:int} %{NUMBER:receiveVideoLossRatio:int} %{NUMBER:receiveVideoResolution:int} %{NUMBER:sendVideoRTT:int} %{NUMBER:receiveJitterScreenShare:int} %{NUMBER:receiveFrameRateScreenShare:int} %{NUMBER:receiveBitRateScreenShare:int} %{NUMBER:recAudioLoss:int} %{NUMBER:recAudioBitRatio:int} %{NUMBER:recJitterAudio:int} %{WORD:dataTag}"}
but in my Kibana Field i am not getting the expected output
{
"_index": "mq-2017.10.30",
"_type": "filebeat",
"_id": "AV9r6lFd4sKh5xU18rWA",
"_version": 1,
"_score": null,
"_source": {
"receiveVideoJitter": 0,
"host_ip": "10.1.10.173",
"input_type": "log",
"message": "2017-10-30T06:13:03.208000 0 0 0 0 0 0 0 0 0 0 GOSB_2",
"tags": [
"MQ_Desktop",
"beats_input_codec_plain_applied"
],
"endpoint": "win",
"@timestamp": "2017-10-30T06:13:03.208Z",
"sendVideoRTT": 0,
"dataTag": "0",
"receiveVideoResolution": 0,
"samplingTimestamp": "2017-10-30T06:13:03.208000",
"receiveVideoLossRatio": 0
},
"fields": {
"@timestamp": [
1509343983208
],
"samplingTimestamp": [
1509343983208
]
},
"sort": [
1509343983208
]
Please let me know where i am doing mistake