How to extract fields from the hadoop logs using logstash

My requirement it to parse the hadoop hdfs-audit log file using logstash and extract the operation type and add this as an additional field along with the complete message before storing the event to the elasticsearch.

Please provide any working code snippet.

What have you tried?

1 Like