Received packet: Type = N5abcde8AbcAbcde9AbcdAbcde15AbcdefghAbcdefA, xx = 95, xxx = 441, xxxXxo = 2, xXxxXxx = 1, xxxx = 9 accepted.
The above line is a message from my log and I want to seperate each data into a field to visualize it in Kibana, I tried to use Grok and Dissect, however I am unable to achieve it. I would be extremely thankful if someone from you could guide me to put them together in a pattern
The following is the grok pattern that I have defined, however it isn't working
grok {
match => { "Log_Message" => "%{GREEDYDATA:Packet_Type}%{NUMBER:ts:int}%{NUMBER:cts:int}%{NUMBER:SeqNo:int}%{NUMBER:cSeqNo:int}%{NUMBER:trtd:int}" } }
I would like to filter out this patter as well from my message, how do I add a filter for it, i tried the following but then neither of them works, I request you to help me out with catching the following message
Abcde Abcde : XX
where Abcde is a string and XX is an integer
I tried the following grok patterns, but doesn't seem to work
@Badger , Thanks for your quick response, I understood the working of the filter now and was able to script according to the parameters.
I am now trying to retrieve values out of the log message.
Aaaaaaa AaaaaaaaaaaaAaaaaaa : Aaaaaa: X|X.
the values of X ranges from 0 to 8 and this was the script that I wrote for it match => { "message" => ["Aaaaaaa AaaaaaaaaaaaAaaaaaa : Aaaaaa: %{NUMBER:AAA:float}|%{NUMBER:BBB:float}" ] }
there is no error thrown, however Logstash is now capturing all messages containing an integer, is there any way where I can make it work?
I want to take the first value and plot in field AAA and second value and plot in field BBB
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.