From FileBeat to Logstash

Elastic Stack Logstash
1

I have a dissect with filebeat, functional, but I need to pass it to logstash and I don't know how to use that same function in Logstash.
Code:

  processors:
    - dissect:
        tokenizer: '%{timestamp} [%{trash}] [%{ip}] "%{alert}" [%{extra}} %{ip_ori}:%{port_ori} %{trash2} %{ip_dest}:%{port_dest}'
2

You can do something similar in logstash using a dissect filter.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.