Grok parse not work

Hello to everyone, I have a problem with grok parsing.
trying to parse fiend log.file.path, I want to put out domain name for example:
I Have path /var/www/httpd-logs/
I'm using %{GREEDYDATA}/%{GREEDYDATA:domain}.access.log,
In Grok debbug it is work but when starting logstash and look on elasticsearch, it is not working.
please help resolve this problem.

In logstash you refer to a path field inside a file object inside a log object using [log][file][path], not log.file.path.


thank you it's work

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.