Greedydata doesn't work

Elastic Stack Logstash
1

https://pastebin.com/W0w8UqLm

and pasted here for your ease of reference:

what is in gstatus.log

2017-11-17 14:16:43.317157 {"volume_summary" : "u" }

what is in my configuration

input {
exec {
command => "cat /home/anelson/gstatus.log"
interval => 1000
}
}

filter {

grok {
  match => [  "[message]", "%{GREEDYDATA:[allofit]}]"   ]
  add_tag => []
  tag_on_failure => ["garbled-message"]
}

}

output {
stdout {
codec => rubydebug { metadata => true }
}
}

when I run the config through logstash:
2017-11-17T13:38:30,794][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
{
"@timestamp" => 2017-11-17T21:38:30.868Z,
"@version" => "1",
"host" => "ubuntu",
"message" => "2017-11-17 14:16:43.317157 {"volume_summary" : "u" }\n",
"command" => "cat /home/anelson/gstatus.log",
"tags" => [
[0] "garbled-message"
]
}

3

Your match statement is incorrect. Please follow the structure/syntax outlined in the documentation.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.