[help]how to write config for multiplication

Elastic Stack Logstash
1

I am writing logstash config for iostat output of aix_server. sample lines is given Below

Disks:                           xfers                                read                                write                                  queue                    time
-------------------- -------------------------------- ------------------------------------ ------------------------------------ -------------------------------------- ---------
                       %tm    bps   tps  bread  bwrtn   rps    avg    min    max time fail   wps    avg    min    max time fail    avg    min    max   avg   avg  serv
                       act                                    serv   serv   serv outs              serv   serv   serv outs        time   time   time  wqsz  sqsz qfull
hdisk5                 0.0   0.0    0.0   0.0    0.0    0.0   0.0    0.0    0.0     0    0   0.0   0.0    0.0    0.0     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11
hdisk4                 0.0   0.0    0.0   0.0    0.0    0.0   0.0    0.0    0.0     0    0   0.0   0.0    0.0    0.0     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11
hdisk3                 0.0   0.0    0.0   0.0    0.0    0.0   0.0    0.0    0.0     0    0   0.0   0.0    0.0    0.0     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11
hdisk2                 0.0   0.0    0.0   0.0    0.0    0.0   0.0    0.0    0.0     0    0   0.0   0.0    0.0    0.0     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11
hdisk0                 0.2  15.2K   0.0   0.0   15.2K   0.0   0.0    0.0    0.0     0    0   3.1   1.9    0.3    6.3     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11
hdisk1                 0.0 819.2    0.0 409.6  409.6    0.1   1.0    1.0    1.0     0    0   0.1   0.5    0.5    0.5     0    0   0.0    0.0    0.0    0.0   0.0   0.0  13:00:11

My requirement is whenever there is the letter "K'( ex: the row starting with hdisk0, there 15.2K ) , i should get the number multiplied by 1024( eg: 15.2x1024).

Could any one help to write the logstash config?

2

A bytes filter will help with that.

3

there is no direct internet available in the server. Downloaded the package of "bytes" and tried to install. But I was getting error

/usr/share/logstash/bin/logstash-plugin install file:///app/required_rpms/logstash-filter-bytes-1.0.0.zip
Installing file: /app/required_rpms/logstash-filter-bytes-1.0.0.zip
ERROR: Invalid pack for: file:///app/required_rpms/logstash-filter-bytes-1.0.0.zip, reason: The pack must contains at least one plugin, message: The pack must contains at least one plugin
4

Did you build the pack yourself following the instructions here?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.