How can I filter certain information from the logs?

Elastic Stack Kibana
2

Hi @hta , try the following grok pattern

filter {
  grok {
    id => "name school grok filter"
    match => { 'message' => '^.*name=\'%{WORD:name}\'.*school=\'%{WORD:school}\''}
  }
}

it gets the name and the school from the message.

1 Like