Hello, I have been workin on this topic for a long time.
Here my logstash conf :
filter {
if [fields][application_name] =~ "APPNAME" {
grok {
match => { "message" => "(?<timestamp>%{TIMESTAMP_ISO8601}) %{GREEDYDATA:logMessage} %{LOGLEVEL:LogLevel} %{GREEDYDATA:Message} $" }
}
}
}
here my filebeat yml :
filebeat.inputs:
- type: log
# Unique ID among all inputs, an ID is required.
id: sse-id
# Change to true to enable this input configuration.
enabled: true
# Paths that should be crawled and fetched. Glob based paths.
paths:
- /home/sscm/elk-demo-vsme.log
fields:
application_name: APPNAME
multiline.pattern: '^[[0-9]{4}-[0-9]{2}-[0-9]{2}'
multiline.negate: true
multiline.match: after
here the part of my logs:
2021-05-11 12:41:50,790 (SbmEventEngine.java:51) INFO - SbmEventEngine is starting..
2021-05-11 12:41:51,377 (SbmEventEngine.java:56) FATAL - SbmEventEngine can not start. Exception occured while starting EventActionEngine.
org.springframework.orm.hibernate3.HibernateJdbcException: JDBC exception on Hibernate data access: SQLException for SQL [select sbmeventac0_.ID as col_0_0_, sbmeventac0_.RETRY_DATE as col_1_0_, sbmeventac0_.NEXT_RETRY_DATE as col_2_0_ from SBM_EVENT_ACTION sbmeventac0_ where sbmeventac0_.SLAVE_ID=? and state=? order by sbmeventac0_.RETRY_DATE asc]; SQL state [HY000]; error code [1296]; could not execute query; nested exception is org.hibernate.exception.GenericJDBCException: could not execute query
at org.springframework.orm.hibernate3.SessionFactoryUtils.convertHibernateAccessException(SessionFactoryUtils.java:642)
I cant handle the exception logs, can anyone help me with it?