How to parse a logs which is in docker to logstash forwarder

Elastic Stack Logstash
1

Please let me know how to parse the logs which is in docker and i need to parse it on logstash forwarder.

Kindly note have installed logstash forwarder on the server not on an docker container

2

Please help me on this

3

Logstash forwarder, if that is what you are referring to, has been deprecated and replaced by Filebeat, which contains functionality around discovery and collection with Docker.

4

Thanks for the response.

Should i have to install filebeat on server and parse the logs or should i have to install via docker.

As i need to parse below logs from docker

ubuntu@host:~$ docker logs -f smap-archiver
2018-01-31 16:40:25+0530 [-] "IP" - - [31/Jan/2018:11:10:24 +0000] "POST /add/FWvkZzkpFgMeuYubdhr3Et7ubKPollp2cYJd HTTP/1.1" 200 - "-" "-"
2018-01-31 16:40:25+0530 [-] "IP" - - [31/Jan/2018:11:10:24 +0000] "POST /add/FWvkZzkpFgMeuYubdhr3Et7ubKPollp2cYJd HTTP/1.1" 200 - "-" "LuaSocket 3.0-rc1"
2018-01-31 16:40:25+0530 [-] "IP" - - [31/Jan/2018:11:10:24 +0000] "POST /add/FWvkZzkpFgMeuYubdhr3Et7ubKPollp2cYJd HTTP/1.1" 200 - "-" "-"
2018-01-31 16:40:25+0530 [-] "IP" - - [31/Jan/2018:11:10:24 +0000] "POST /add/FWvkZzkpFgMeuYubdhr3Et7ubKPollp2cYJd HTTP/1.1" 200 - "-" "-"

Please suggest me on this

5

Please help me here

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.