This is my log.
i used "elastic" and "filebeat" and "kibana"
I'm a beginner who just started studying.
I want to parse and use the contents of "message".
Where should I start and what should we do?
You'd be looking at an ingest pipeline which uses a grok and a json processor.
This will just get you started. Next steps would be to enrich your events and convert your fields to the Elastic Common Schema
When the pipeline is setup you have to specify the pipeline to be used in filebeat.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.