How to multiple events into one event in filebeat


(Pratheek K) #1

I would like to combine multiple events into one event in the filebeat based on a unique string.
I have the below log:
June 1st 2017, 11:51:26.992 12345ab AAAAA ClassName:methodName:99 [DEBUG] - Received request:
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - request:
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - Id: abbababcajdfbjasndflsdlf
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - unique id: AAAAA

Now,all the events having AAAAA in it should be combined into one event. How can i configure this.

Thanks


(Steffen Siering) #2

Sounds like a job for logstash.


(huang) #3

regular expression


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.