How to create index for application logs in Logstash

I need to create index for below application log file in logstash , can any one help me

[2018-02-01 15:52:31,107][WARN][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][284]:[log transaction to DB via JMS Q]
[2018-02-01 15:52:31,110][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][289]:[AppRef={exception=false, reason=null, dealerCode=null, conversationID=DDA~CNG-CSI~6a9b7a8b-9f03-421a-9bac-379e938dd794, errorInfo=null, language=ENG, imsi=310410032724720, hostname=zlp24272, iccid=89014103270327247201, rateplanNumber=null, responsePart=null, objectKey=53767081, endTimeStamp=0, msisdn=null, class=class com.att.dda2.bean.DDA2AppRefBean, imeiDlc=null, insertDt=null, subMarket=null, messageId=ACTIVATIONSTATUS_DEVICESUPPORT, accountNumber=null, prodType=null, serviceAreaCode=null, transactionId=5779b5dd-6ae9-49e5-bf02-c5b348c6446f, appRefId=53767081, market=null, rateplanLongDesc=null, zipcode=null, dapiConvId=19205~dapi~1.0~20180201035230484~zlp24272~1517521950489~-340445039, noActivate=false, rateplanCode=null, imei=015026000086620, starCode=789, complete=null, messageTimestamp=1517521950444, rateplanShortDesc=null, status=null}]
[2018-02-01 15:52:31,112][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][290]:[Request={field19=null, errorCode=null, field17=null, field18=null, SCode=789, field20=null, appRef=null, IMSI=310410032724720, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppInput, callingPartyID=11032724720, field11=null, field12=null, errorCause=null, field1=01, field10=null, field15=null, field16=null, field13=null, field14=null, field7=null, field6=null, field9=null, field8=null, field3=015026000086620, field2=310410032724720, field5=null, field4=null}]
[2018-02-01 15:52:31,114][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][291]:[Response={errorCause=null, retAddr=null, appRef=53767081, errorCode=null, USSData=02*02#, end=true, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppResp, notify=false}]

What exactly do you need help with?

Need to create index for above log in logstash , for example in above log show IMEI number , if i search that IMEI number in kibana , i need to get complete above log file

Ok, so what have you done so far?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.