How can i push the tomcat logs into elasticsearch it is showing grokparsefailure


(Akash Katakam) #1

input {
file {
path => "E:\wo\examples\xxxxxx.log.2015-12-19.log"

    start_position => "beginning"
    sincedb_path => "C:\Users\Akash katakam\null"

}

}
filter {
grok {
match => { "message" => "%{TOMCATLOG %{TOMCAT_DATESTAMP:timestamp} | %{LOGLEVEL:level} | %{JAVACLASS:class} - %{JAVALOGMESSAGE:logmessage}}"}
}

}

output {
elasticsearch {

index => "splog"
}
stdout {}
}

this is my conf file.


(Mark Walkom) #2

That grok pattern does not look valid, where did you get it from?


(Akash Katakam) #4

I followed this blog post.


(system) #5