F5 Telemetry Streaming using Logstash

Hi
has anyone successfully loaded the bigIP Telemetry Streaming to ES using Logstash.
I have tried the following pipeline config:

input { 
 tcp {
    port => 5053
    codec => "plain"
    }
} 
filter {
    if [message] =~ "\A\{.+\}\z" {
        json {
            id => parse_message
            source => "message"
            target => "msg"
            skip_on_invalid_json => true
        }
    }
}
output {
    file {
     path => "/var/log/logstash/bigip.json"
    }
    stdout { codec => rubydebug }
}

which is generating some unusable JSON... right now :frowning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.