Extract source filename in logstash received from Filebeat

I am using ELK v5.5

How do i extract only log file name from the source log file name send by filebeat to logstash

I am processing dozens of logs files and will be having different paths and log file names, I just want to extract the file name, i.e. file name after last slash

sample log files names:

D:\uat\beats\filebeat550\input_logs\my_xzy_abc_server\my_xyz_abc_server_19Sep2017.log

/usr/logs/my_xzy_abc_server/my_xyz_abc_server_19Sep2017.log

Use a grok filter. This has been asked here multiple times before so you should find examples in the archives.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.