How do parse log format apache access

Elastic Stack Elasticsearch
1

Good afternoon

I have a log with the format of the apache access log service (access_log)

10.0.xx.xx - - [28/Aug/2023:15:25:18 +0700] "GET /xxx/en/neoclassic/cases/main HTTP/1.0" 200 2007 133793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)

Now I want parse text log above and insert to grok in the Ingest Pipelines. I tries configure grok with devtool but it is seem not ok. Please help me to solve the problem quickly

2

Hi @vanhaiit90

Perhaps take a look at the Apache module in filebeat.

Just follow the quick start but use the Apache module instead

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.