How to handle different logs in logstash server

Elastic Stack Logstash
1

currently,,I want to send nginx_access.log and nginx_error.log to logstash server.here is the filebeat.yml configuration,I don't know whether I am right or not.

filebeat.png705×320 10.8 KB

and this is the nginx_access log format:

eeeeee.............I don't know how to configure logstash.conf in logstash server,to separate them and treat different logs in different ways.

this configuration above is the wrong my example ....I searched a lot,still don't get a clue.
appreciate a lot ,if you could help

2

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.

3

You're on the right track with the conditional, but you can't wrap just codec => "json" since that's not a filter. Instead, wrap a json filter with your conditional:

if ... {
  json {
    source => "message"
  }
}
4

oh! really thanks .solved my problem so easily:smiley:

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.