Extract source filename in logstash received from Filebeat


(hasaN khaN) #1

I am using ELK v5.5

How do i extract only log file name from the source log file name send by filebeat to logstash

I am processing dozens of logs files and will be having different paths and log file names, I just want to extract the file name, i.e. file name after last slash

sample log files names:

D:\uat\beats\filebeat550\input_logs\my_xzy_abc_server\my_xyz_abc_server_19Sep2017.log

/usr/logs/my_xzy_abc_server/my_xyz_abc_server_19Sep2017.log


(Magnus B├Ąck) #2

Use a grok filter. This has been asked here multiple times before so you should find examples in the archives.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.