Current Setup:
sending logs via 40 instances to centralized logstast server. Currently logstash handles all the groks and inserts data to ES.
Requirement looking for:
In our application logs, we have different log_levels. For example i don't want to see DEBUG log level messages in KIBANA. How efficiently can we achieve this; log level is not at the start of the line it. So i'm not sure it can be handled in filebeat (exclude_lines).
Any other suggestion so that i don't show DEBUG logs in kinana.
ELK Stack Version:
elasticsearch-2.1.1,logstash-2.1.1, kibana-4.3.1-linux-x64, and filebeat-1.2.0-1.x86_64