# How to create index for application logs in Logstash

**URL:** <https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116>\
**Category:** Logstash\
**Created:** [February 1, 2018, 10:41pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116 "2018-02-01T22:41:28Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vikneswar](https://avatars.discourse-cdn.com/v4/letter/v/e99b99/32.png) [@Vikneswar](https://discuss.elastic.co/u/Vikneswar)\
**Post date:** [February 1, 2018, 10:41pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116/1 "2018-02-01T22:41:28Z")

</div>

I need to create index for below application log file in logstash , can any one help me

[2018-02-01 15:52:31,107][WARN][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][284]:[log transaction to DB via JMS Q]  
[2018-02-01 15:52:31,110][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][289]:[AppRef={exception=false, reason=null, dealerCode=null, conversationID=DDA~CNG-CSI~6a9b7a8b-9f03-421a-9bac-379e938dd794, errorInfo=null, language=ENG, imsi=310410032724720, hostname=zlp24272, iccid=89014103270327247201, rateplanNumber=null, responsePart=null, objectKey=53767081, endTimeStamp=0, msisdn=null, class=class com.att.dda2.bean.DDA2AppRefBean, imeiDlc=null, insertDt=null, subMarket=null, messageId=ACTIVATIONSTATUS\_DEVICESUPPORT, accountNumber=null, prodType=null, serviceAreaCode=null, transactionId=5779b5dd-6ae9-49e5-bf02-c5b348c6446f, appRefId=53767081, market=null, rateplanLongDesc=null, zipcode=null, dapiConvId=19205~dapi~1.0~20180201035230484~zlp24272~1517521950489~-340445039, noActivate=false, rateplanCode=null, imei=015026000086620, starCode=789, complete=null, messageTimestamp=1517521950444, rateplanShortDesc=null, status=null}]  
[2018-02-01 15:52:31,112][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][290]:[Request={field19=null, errorCode=null, field17=null, field18=null, SCode=789, field20=null, appRef=null, IMSI=310410032724720, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppInput, callingPartyID=11032724720, field11=null, field12=null, errorCause=null, field1=01, field10=null, field15=null, field16=null, field13=null, field14=null, field7=null, field6=null, field9=null, field8=null, field3=015026000086620, field2=310410032724720, field5=null, field4=null}]  
[2018-02-01 15:52:31,114][INFO][[ACTIVE] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'][com.att.dda2.ws.helper.DDA2ServiceHelperBase][logTransaction][291]:[Response={errorCause=null, retAddr=null, appRef=53767081, errorCode=null, USSData=02\*02#, end=true, USSDCS=0FH, class=class ws.device.dda.att.com.USSDAppResp, notify=false}]

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 1, 2018, 10:41pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116/2 "2018-02-01T22:41:49Z")

</div>

What exactly do you need help with?

---

<div class="post-metadata">

**Author:** ![Vikneswar](https://avatars.discourse-cdn.com/v4/letter/v/e99b99/32.png) [@Vikneswar](https://discuss.elastic.co/u/Vikneswar)\
**Post date:** [February 1, 2018, 10:43pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116/3 "2018-02-01T22:43:39Z")

</div>

Need to create index for above log in logstash , for example in above log show IMEI number , if i search that IMEI number in kibana , i need to get complete above log file

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 1, 2018, 10:54pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116/4 "2018-02-01T22:54:21Z")

</div>

Ok, so what have you done so far?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2018, 10:54pm UTC](https://discuss.elastic.co/t/how-to-create-index-for-application-logs-in-logstash/118116/5 "2018-03-01T22:54:41Z")

</div>

Closed on March 1, 2018, 10:54pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.