From FileBeat to Logstash

I have a dissect with filebeat, functional, but I need to pass it to logstash and I don't know how to use that same function in Logstash.

    - dissect:
        tokenizer: '%{timestamp} [%{trash}] [%{ip}] "%{alert}" [%{extra}} %{ip_ori}:%{port_ori} %{trash2} %{ip_dest}:%{port_dest}'

You can do something similar in logstash using a dissect filter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.