How to create index for application logs in Logstash

Elastic Stack Logstash
1

I need to create index for below application log file in logstash , can any one help me

[2018-02-01 15:52:31,107][WARN][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][284]:[log transaction to DB via JMS Q]
[2018-02-01 15:52:31,110][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][289]:[AppRef={exception=false, reason=null, dealerCode=null, conversationID=DDA~CNG-CSI~6a9b7a8b-9f03-421a-9bac-379e938dd794, errorInfo=null, language=ENG, imsi=310410032724720, hostname=zlp24272, iccid=89014103270327247201, rateplanNumber=null, responsePart=null, objectKey=53767081, endTimeStamp=0, msisdn=null, class=class com.att.dda2.bean.DDA2AppRefBean, imeiDlc=null, insertDt=null, subMarket=null, messageId=ACTIVATIONSTATUS_DEVICESUPPORT, accountNumber=null, prodType=null, serviceAreaCode=null, transactionId=5779b5dd-6ae9-49e5-bf02-c5b348c6446f, appRefId=53767081, market=null, rateplanLongDesc=null, zipcode=null, dapiConvId=19205~dapi~1.0~20180201035230484~zlp24272~1517521950489~-340445039, noActivate=false, rateplanCode=null, imei=015026000086620, starCode=789, complete=null, messageTimestamp=1517521950444, rateplanShortDesc=null, status=null}]
[2018-02-01 15:52:31,112][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][290]:[Request={field19=null, errorCode=null, field17=null, field18=null, SCode=789, field20=null, appRef=null, IMSI=310410032724720, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppInput, callingPartyID=11032724720, field11=null, field12=null, errorCause=null, field1=01, field10=null, field15=null, field16=null, field13=null, field14=null, field7=null, field6=null, field9=null, field8=null, field3=015026000086620, field2=310410032724720, field5=null, field4=null}]
[2018-02-01 15:52:31,114][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][291]:[Response={errorCause=null, retAddr=null, appRef=53767081, errorCode=null, USSData=02*02#, end=true, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppResp, notify=false}]

2

What exactly do you need help with?

3

Need to create index for above log in logstash , for example in above log show IMEI number , if i search that IMEI number in kibana , i need to get complete above log file

4

Ok, so what have you done so far?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.