How to get access time of filename and set it in every log message?

We need to sort message in Web, but the log messages are in different log files,so we want get the access time of log file ,then use the access time and offset to sort log message in different log files. How to it with filebeat? Thanks!

I don't think Filebeat has this functionality. We could add it as a processor, so feel free to open an issue in Github for it.

Thank you very much for replying me ! I have open an issue in Github for it. May I know when official could pay attention to this problem, I think the log sort is very common demand.

It's simple, you need put logstash to intercept a request from filebeat and edit the message

Thanks for replyinig me!
This way you mentioned may not work, the sort information we need should be collected when the filebeat harvest log file, rather than send to logstash and then parse. There is no enough information that logstash can handle the sorting problem.

This topic was automatically closed after 21 days. New replies are no longer allowed.