Filebeat doesn't parse postgresql csvlog files

Elastic Stack Beats
1

Hi guys,
Using 6.5.4 stack. configured filebeat with postgresql module and trying to parse postgres csvlog files into ES and visualize in Kibana. In Kibana filebeat-* index I can see postgres.log.* fields (9 of them), but when I do discover I see an error_message:
Provided Grok expressions do not match field value: [2019-02-05 08:46:05.740 EST,,,25978,"host.com:51524",5c59939d.657a,1,"",2019-02-05 08:46:05 EST,,0,LOG,00000,"connection received: host=hostname.com port=51524",,,,,,,,,"
here
postgres@/u01/elk/filebeat$ more modules.d/postgresql.yml

  • module: postgresql

    All logs

    log:
    enabled: true

    Set custom paths for the log files. If left empty,

    Filebeat will choose the paths depending on your OS.

    #var.paths:
    var.paths: ["/u01/pgsql/11/data/pg_log/postgresql-*.csv"]
    What am I doing wrong? Thank you.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.