Hi,
How can i read the log file continuously and make it as readable in elastic UI, Below example is sample log. I tried with grok but it's not helping that much before few fields rolling in between lines (few log line has "model" in 1st place next to INFO few log has at last).
Log sample :
2023-06-07 16:34:30 [INFO] Cloud port ["model"] = ab-class ["endpoint"] = https://hello.com:943 ["header"] = BB4-GDG-SHA256 Credential=fjdfjdhfkj/232323/us-w-2/maker, SignedHeaders=content-type;host;x-add-date, Signature=f189d3e4496 ["sign_key"] = c987 ["query"] = PREPARE statement1 FROM SELECT * FROM table where locationid = ? and updatedtimestamp = ? and exp_dt = ? ["preparedquery"] = nil ["hash"] = bfce86f ["status_code"] = 200 ["res_time"] = 0.284693512 ["new_endpoint"] = master-model ["acc_key"] = ASKPER ["user"] = sub-bas ["va_tag"] = 0.0 ["Region"] = 2bf84d ["expiration"] = 2026-06-07T22:30:09Z ["Date"] = 0fd7a9 ["request_body"] = [{
"merquery":"PREPARE statement1 FROM SELECT * FROM table where locationid = ? and updatedtimestamp = ? and exp_dt = ?"
}] ["Service"] = bed1b18 ["host"] = heelloo.net ["secu_key"] = 6Sddf9+yq1k/plp ["name"] = prime ["sign"] = BB4-DKOSD-SHA256
20340907T122Z
20299607/us-No=OR-2/sagemaker/request
b02ba
input{
file {
path => "/path/logger.log"
codec => multiline {
pattern => "^%{TIMESTAMP_ISO8601}"
negate => true
what => "previous"
}
start_position => "beginning"
}
}```
I want to read the line and make [" "] content as field name and respective value as field value in elastic
TIA