How to multiple events into one event in filebeat

Elastic Stack Beats
1

I would like to combine multiple events into one event in the filebeat based on a unique string.
I have the below log:
June 1st 2017, 11:51:26.992 12345ab AAAAA ClassName:methodName:99 [DEBUG] - Received request:
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - request:
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - Id: abbababcajdfbjasndflsdlf
June 1st 2017, 11:51:26.993 12345ab AAAAA ClassName:methodName:100 [DEBUG] - unique id: AAAAA

Now,all the events having AAAAA in it should be combined into one event. How can i configure this.

Thanks

2

Sounds like a job for logstash.

3

regular expression

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.