# How to feed the below Schema file in the ELK Stack and receive the output

**URL:** <https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903>\
**Category:** Logstash\
**Created:** [March 31, 2016, 9:08am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903 "2016-03-31T09:08:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dsuriyadeepan](https://avatars.discourse-cdn.com/v4/letter/d/df705f/32.png) [@dsuriyadeepan](https://discuss.elastic.co/u/dsuriyadeepan)\
**Post date:** [March 31, 2016, 9:08am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903/1 "2016-03-31T09:08:41Z")

</div>

Hi Folks ,

```
        Have a pleasant day ahead.

       We have installed ELK stack with NX log in windows 2008 R2 server.Now,we need to analyse the following log structure in this stack.I am not a programmer.Could,some one guide me to feed the log to the ELK stack & how to configure to get the graphical output.

```

Scheme to be Analysed :

#Fields: c-ip cs-username c-agent sc-authenticated date time s-svcname s-computername cs-referred r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol cs-transport s-operation cs-uri cs-mime-type s-object-source sc-status s-cache-info rule FilterInfo cs-Network sc-Network error-info action

Planning to take top bandwidth users and list of top websites

-- Suriya

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 31, 2016, 9:25am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903/2 "2016-03-31T09:25:34Z")

</div>

Are you tasking how to parse a log message containing those fields in some form? If yes, please post an actual log message.

---

<div class="post-metadata">

**Author:** ![dsuriyadeepan](https://avatars.discourse-cdn.com/v4/letter/d/df705f/32.png) [@dsuriyadeepan](https://discuss.elastic.co/u/dsuriyadeepan)\
**Post date:** [March 31, 2016, 10:57am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903/3 "2016-03-31T10:57:58Z")

</div>

Hi

Thanks for your revert 🙂

192.165.19.97 India\hemasri Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E) Y 2015-11-20 22:09:53 w3proxy DLGWEPX01B - [upstream.ocissia.out.inet.ssi.indgrp.net](http://upstream.ocissia.out.inet.ssi.indgrp.net) 215.116.18.43 8080 - 907 444 SSL-tunnel TCP - [www.indiacements.in:443](http://www.indiacements.in:443) - Upstream 995 - Web Proxy Req ID: 3d289fa7 Internal External 0x888 Failed

192.165.181.98 US\KuuCha Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36 Y 2015-11-20 22:09:53 w3proxy ITHYLGWEBPXB - [upstream.ocissia.out.inet.ssi.indgrp.net](http://upstream.ocissia.out.inet.ssi.indgrp.net) 215.116.18.43 8080 125 2384 124203 http TCP GET [http://oracle.ittoolbox.com/groups/technical-functional/oracle-bi-l/agents-in-obiee-11g-invalid-subscribers-skipped-5443767](http://oracle.ittoolbox.com/groups/technical-functional/oracle-bi-l/agents-in-obiee-11g-invalid-subscribers-skipped-5443767) text/html; charset=utf-8 VCache 304 0x9210100 Web Proxy Req ID: 3d289fcc Internal External 0xc80 Allowed

-- Suriya

---

<div class="post-metadata">

**Author:** ![dsuriyadeepan](https://avatars.discourse-cdn.com/v4/letter/d/df705f/32.png) [@dsuriyadeepan](https://discuss.elastic.co/u/dsuriyadeepan)\
**Post date:** [April 5, 2016, 10:29am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903/4 "2016-04-05T10:29:39Z")

</div>

Hi ,

```
Could you please post the update on this part.

```

-- Suriya

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:03am UTC](https://discuss.elastic.co/t/how-to-feed-the-below-schema-file-in-the-elk-stack-and-receive-the-output/45903/5 "2017-07-06T05:03:51Z")

</div>

Closed on July 6, 2017, 5:03am UTC