How to create custom fields like apache for Tomcat logs?

Elastic Stack Beats
,
1

Dear Team,

I am happy to use your services but I want to create custom fields like apache module response code, error and I want to create same to same fields for tomcat access logs, how it is possible, Please share the steps

my demo logs are mentioned below:--

@timestamp August 3rd 2019, 13:46:17.044
t _id buKNVmwBVzO-jEThAtIP
t _index filebeat-6.4.2-2019.08.03
# _score -
t _type doc
t beat.hostname ip-tomcat-xx-xx-x-xxx
t beat.name ip-tomcat-xx-xx-x-xxx
t beat.version 6.4.2
t host.name ip-tomcat-xx-xx-x-xxx
t input.type log
t message xx-xx-x-xxx - - [03/Aug/2019:13:46:06 +0530] "POST /4.0.0.1/profile/getUserStatus HTTP/1.1" 13 200 751
# offset 3,978,827
t prospector.type log
t source /opt/tomcat/logs/live_access_log.2019-08-03.txt
2

You need to create your own Filebeat module: https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html

3

Is there any video tutorial for that to create easily.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.