How to filter in filebeat

Hi!

If these logs are not from a service that is supported by the current Filebeat modules then you will need to forward the raw messages to logstash and analyze them there.

Another option in order to achieve this with only Filebeat would be to use processor-script in order to parse and analyze the raw message. Note that this might be not the best option in terms of performance.

C.

2 Likes