Hello to everyone, I have a problem with grok parsing.
trying to parse fiend log.file.path, I want to put out domain name for example:
I Have path /var/www/httpd-logs/mydomain.net.access.log
I'm using %{GREEDYDATA}/%{GREEDYDATA:domain}.access.log,
In Grok debbug it is work but when starting logstash and look on elasticsearch, it is not working.
please help resolve this problem.
In logstash you refer to a path field inside a file object inside a log object using [log][file][path], not log.file.path.
2 Likes
thank you it's work
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.