How to use match and term in DSL Query?

Elastic Stack Kibana
1

Hi,
bellow query runs fine in older version of kibana 7.10.1, however same query does not work in 8.1.3,
can any one please tell me what i need to change to make it work ?
Thanks for the help

GET _search
{
"query": {
"bool": {
"must": [
{
"match": {
"log.file.path": "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
}
},

    {
      "term": {
         "YUMA-GPS-LOG.COMMAND": {
          "value": "HEARTBEAT"
        }
      }
    },


    {
      "term": {
         "YUMA-GPS-LOG.IMEI": {
          "value": "0353701093130496"
        }
      }
    }



  ],
  "filter": {
    "range": {
      "@timestamp": {
        "gte": "now-1440m"
      }
    }
  }
}

}
}

2

Hi

When you run it in 8.1.3, what's the result? Is there an error message?

Thx & Best,
Matthias

3

Hi Matthias,
its does not give any error but it does not match anything
but same Query shows data with older version, so i am woundering if the syntax is still same for both old or new

{
"took" : 2,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 0,
"relation" : "eq"
},
"max_score" : null,
"hits" :
}
}

4

I'm not aware of a change, could you share _source of a doc and mapping of the index? thx

5

Hi, pleae find one of the example
i tookd it from JSON format , will this be ok ?

{
"_index": "filebeat-7.2.0-2022.04.25",
"_id": "QnkiY4ABZiia4yBwdGsB",
"_version": 1,
"_score": 1,
"_ignored": [
"event.original.keyword",
"message.keyword"
],
"_source": {
"YUMA-GPS-LOG": {
"SIGNAL": "false",
"ENGINE": "0",
"LAT": "23.76556888888889",
"DOOR": "0",
"INFO": "true",
"GSM_SIGNAL": "25",
"GPS STATUS": "true",
"SERIAL": "0ABA",
"GPS POS": "false",
"COMMAND": "INFO",
"O&E": "CONNECTED",
"HEADING": "62.0",
"FUEL": "0.0V/0.0%",
"IMEI": "0351742100642380",
"BATTERY": "100.0%",
"LON": "90.41482666666667",
"ALARM": "NONE",
"GPS_SATS": "4",
"SPEED": "0.0",
"CHARGING": "1",
"TIMESTAMP": "Mon Apr 25 23:49:14 UTC 2022"
},
"ecs": {
"version": "1.0.0"
},
"agent": {
"id": "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname": "PRODWILDIFY",
"version": "7.2.0",
"ephemeral_id": "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type": "filebeat"
},
"cloud": {
"region": "lon1",
"provider": "digitalocean",
"instance": {
"id": "135683766"
}
},
"input": {
"type": "log"
},
"@timestamp": "2022-04-25T23:50:42.852Z",
"@version": "1",
"event": {
"original": "23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]"
},
"tags": [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host": {
"id": "982b7b8d1795445e9b8a9a794550123f",
"containerized": false,
"os": {
"family": "debian",
"kernel": "4.15.0-171-generic",
"name": "Ubuntu",
"version": "18.04.5 LTS (Bionic Beaver)",
"platform": "ubuntu",
"codename": "bionic"
},
"name": "PRODWILDIFY",
"hostname": "PRODWILDIFY",
"architecture": "x86_64"
},
"message": "23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]",
"log": {
"file": {
"path": "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset": 24402752
}
},
"fields": {
"agent.version.keyword": [
"7.2.0"
],
"host.architecture.keyword": [
"x86_64"
],
"cloud.instance.id.keyword": [
"135683766"
],
"YUMA-GPS-LOG.LAT.keyword": [
"23.76556888888889"
],
"host.name.keyword": [
"PRODWILDIFY"
],
"YUMA-GPS-LOG.DOOR": [
"0"
],
"YUMA-GPS-LOG.SPEED": [
"0.0"
],
"host.hostname": [
"PRODWILDIFY"
],
"YUMA-GPS-LOG.SIGNAL.keyword": [
"false"
],
"agent.hostname.keyword": [
"PRODWILDIFY"
],
"YUMA-GPS-LOG.GSM_SIGNAL": [
"25"
],
"YUMA-GPS-LOG.TIMESTAMP.keyword": [
"Mon Apr 25 23:49:14 UTC 2022"
],
"YUMA-GPS-LOG.LON": [
"90.41482666666667"
],
"YUMA-GPS-LOG.IMEI": [
"0351742100642380"
],
"ecs.version.keyword": [
"1.0.0"
],
"host.os.version": [
"18.04.5 LTS (Bionic Beaver)"
],
"host.os.name": [
"Ubuntu"
],
"YUMA-GPS-LOG.GPS STATUS": [
"true"
],
"host.id.keyword": [
"982b7b8d1795445e9b8a9a794550123f"
],
"host.name": [
"PRODWILDIFY"
],
"host.os.version.keyword": [
"18.04.5 LTS (Bionic Beaver)"
],
"YUMA-GPS-LOG.GSM_SIGNAL.keyword": [
"25"
],
"YUMA-GPS-LOG.DOOR.keyword": [
"0"
],
"event.original": [
"23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]"
],
"cloud.region": [
"lon1"
],
"YUMA-GPS-LOG.ENGINE": [
"0"
],
"YUMA-GPS-LOG.GPS_SATS": [
"4"
],
"YUMA-GPS-LOG.CHARGING.keyword": [
"1"
],
"agent.id.keyword": [
"e47d8400-1077-4fd1-a56b-68e69e1b129e"
],
"YUMA-GPS-LOG.GPS_SATS.keyword": [
"4"
],
"input.type": [
"log"
],
"@version.keyword": [
"1"
],
"YUMA-GPS-LOG.BATTERY": [
"100.0%"
],
"log.offset": [
24402752
],
"YUMA-GPS-LOG.TIMESTAMP": [
"Mon Apr 25 23:49:14 UTC 2022"
],
"agent.hostname": [
"PRODWILDIFY"
],
"YUMA-GPS-LOG.SERIAL": [
"0ABA"
],
"YUMA-GPS-LOG.GPS POS": [
"false"
],
"tags": [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host.architecture": [
"x86_64"
],
"cloud.provider": [
"digitalocean"
],
"agent.id": [
"e47d8400-1077-4fd1-a56b-68e69e1b129e"
],
"YUMA-GPS-LOG.BATTERY.keyword": [
"100.0%"
],
"YUMA-GPS-LOG.IMEI.keyword": [
"0351742100642380"
],
"YUMA-GPS-LOG.SIGNAL": [
"false"
],
"host.containerized": [
false
],
"YUMA-GPS-LOG.HEADING": [
"62.0"
],
"ecs.version": [
"1.0.0"
],
"YUMA-GPS-LOG.INFO": [
"true"
],
"host.hostname.keyword": [
"PRODWILDIFY"
],
"agent.version": [
"7.2.0"
],
"YUMA-GPS-LOG.COMMAND.keyword": [
"INFO"
],
"host.os.family": [
"debian"
],
"YUMA-GPS-LOG.FUEL": [
"0.0V/0.0%"
],
"YUMA-GPS-LOG.LON.keyword": [
"90.41482666666667"
],
"input.type.keyword": [
"log"
],
"YUMA-GPS-LOG.LAT": [
"23.76556888888889"
],
"YUMA-GPS-LOG.GPS STATUS.keyword": [
"true"
],
"YUMA-GPS-LOG.ALARM.keyword": [
"NONE"
],
"tags.keyword": [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"YUMA-GPS-LOG.COMMAND": [
"INFO"
],
"YUMA-GPS-LOG.SPEED.keyword": [
"0.0"
],
"cloud.instance.id": [
"135683766"
],
"agent.type": [
"filebeat"
],
"host.os.kernel.keyword": [
"4.15.0-171-generic"
],
"YUMA-GPS-LOG.O&E": [
"CONNECTED"
],
"host.os.kernel": [
"4.15.0-171-generic"
],
"@version": [
"1"
],
"host.os.name.keyword": [
"Ubuntu"
],
"YUMA-GPS-LOG.HEADING.keyword": [
"62.0"
],
"host.id": [
"982b7b8d1795445e9b8a9a794550123f"
],
"log.file.path.keyword": [
"/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
],
"agent.type.keyword": [
"filebeat"
],
"agent.ephemeral_id.keyword": [
"f1aca50c-fd9a-4f61-a6d0-1c42388e930e"
],
"cloud.region.keyword": [
"lon1"
],
"host.os.codename.keyword": [
"bionic"
],
"YUMA-GPS-LOG.CHARGING": [
"1"
],
"host.os.codename": [
"bionic"
],
"YUMA-GPS-LOG.FUEL.keyword": [
"0.0V/0.0%"
],
"message": [
"23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]"
],
"host.os.family.keyword": [
"debian"
],
"YUMA-GPS-LOG.INFO.keyword": [
"true"
],
"@timestamp": [
"2022-04-25T23:50:42.852Z"
],
"YUMA-GPS-LOG.ENGINE.keyword": [
"0"
],
"host.os.platform": [
"ubuntu"
],
"host.os.platform.keyword": [
"ubuntu"
],
"log.file.path": [
"/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
],
"cloud.provider.keyword": [
"digitalocean"
],
"agent.ephemeral_id": [
"f1aca50c-fd9a-4f61-a6d0-1c42388e930e"
],
"YUMA-GPS-LOG.SERIAL.keyword": [
"0ABA"
],
"YUMA-GPS-LOG.GPS POS.keyword": [
"false"
],
"YUMA-GPS-LOG.O&E.keyword": [
"CONNECTED"
],
"YUMA-GPS-LOG.ALARM": [
"NONE"
]
},
"ignored_field_values": {
"message.keyword": [
"23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]"
],
"event.original.keyword": [
"23:50:42,559 DEBUG (CONCOX-:42698) ()(18392994)>[TIMESTAMP:Mon Apr 25 23:49:14 UTC 2022],[IMEI:0351742100642380],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.41482666666667],[LAT:23.76556888888889],[SPEED:0.0],[HEADING:62.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:25],[GPS_SATS:4],[GPS POS:false],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0ABA]"
]
}
}

6

if i only run this

"match": {
"log.file.path": "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
}

i get bellow result : -

{
"took" : 752,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 10000,
"relation" : "gte"
},
"max_score" : 0.06997609,
"hits" : [
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "nGJaYYABZiia4yBwisE8",
"_score" : 0.06997609,
"_source" : {
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"version" : "7.2.0",
"hostname" : "PRODWILDIFY",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"input" : {
"type" : "log"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,251 ERROR (CONCOX-202.134.8.134:27670) MessageWork(17711321) - (imei=0351742100647850) - Closing socket, as we can't map active imei to user"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,251 ERROR (CONCOX-202.134.8.134:27670) MessageWork(17711321) - (imei=0351742100647850) - Closing socket, as we can't map active imei to user",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74994808
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"id" : "nWJaYYABZiia4yBwisE",
"_score" : 0.06997609,
"_source" : {
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname" : "PRODWILDIFY",
"version" : "7.2.0",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"input" : {
"type" : "log"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,377 ERROR (CONCOX-202.134.14.159:42966) MessageWork(17711323) - (imei=0352503091906575) - Closing socket, as we can't map active imei to user"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,377 ERROR (CONCOX-202.134.14.159:42966) MessageWork(17711323) - (imei=0352503091906575) - Closing socket, as we can't map active imei to user",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74995111
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"id" : "nmJaYYABZiia4yBwisE",
"_score" : 0.06997609,
"_source" : {
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname" : "PRODWILDIFY",
"version" : "7.2.0",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"input" : {
"type" : "log"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"@timestamp" : "2022-04-25T15:32:44.139Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,943 ERROR (CONCOX-202.134.14.156:34066) MessageWork(17711341) - (imei=0351777090842715) - Closing socket, as we can't map active imei to user"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,943 ERROR (CONCOX-202.134.14.156:34066) MessageWork(17711341) - (imei=0351777090842715) - Closing socket, as we can't map active imei to user",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 75005794
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"id" : "oGJaYYABZiia4yBwisE",
"_score" : 0.06997609,
"_ignored" : [
"event.original.keyword",
"message.keyword"
],
"_source" : {
"YUMA-GPS-LOG" : {
"SIGNAL" : "false",
"ENGINE" : "1",
"LAT" : "23.809244444444445",
"DOOR" : "0",
"INFO" : "true",
"GSM_SIGNAL" : "100",
"GPS STATUS" : "true",
"SERIAL" : "0252",
"GPS POS" : "true",
"COMMAND" : "INFO",
"O&E" : "CONNECTED",
"HEADING" : "352.0",
"FUEL" : "0.0V/0.0%",
"IMEI" : "0353701091171443",
"BATTERY" : "100.0%",
"LON" : "90.43080888888889",
"ALARM" : "NONE",
"GPS_SATS" : "10",
"SPEED" : "7.0",
"CHARGING" : "1",
"TIMESTAMP" : "Mon Apr 25 15:32:43 UTC 2022"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"version" : "7.2.0",
"hostname" : "PRODWILDIFY",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"input" : {
"type" : "log"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"@timestamp" : "2022-04-25T15:32:44.139Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,894 DEBUG (CONCOX-202.134.14.137:6660) (202.134.14.137)(17583561)>[TIMESTAMP:Mon Apr 25 15:32:43 UTC 2022],[IMEI:0353701091171443],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:1],[DOOR:0],[LON:90.43080888888889],[LAT:23.809244444444445],[SPEED:7.0],[HEADING:352.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:10],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0252]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,894 DEBUG (CONCOX-202.134.14.137:6660) (202.134.14.137)(17583561)>[TIMESTAMP:Mon Apr 25 15:32:43 UTC 2022],[IMEI:0353701091171443],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:1],[DOOR:0],[LON:90.43080888888889],[LAT:23.809244444444445],[SPEED:7.0],[HEADING:352.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:10],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:0252]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 75005361
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "oWJaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_source" : {
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"version" : "7.2.0",
"hostname" : "PRODWILDIFY",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"input" : {
"type" : "log"
},
"cloud" : {
"region" : "lon1",
"provider" : "digitalocean",
"instance" : {
"id" : "135683766"
}
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,379 ERROR (CONCOX-202.134.14.159:42966) MessageWork(17711323) - (imei=0352503091906575) - IOException for imei: 0352503091906575-> Socket closed"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,379 ERROR (CONCOX-202.134.14.159:42966) MessageWork(17711323) - (imei=0352503091906575) - IOException for imei: 0352503091906575-> Socket closed",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74995262
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "omJaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_source" : {
"YUMA-GPS-LOG" : {
"REQUEST" : "787822221604190F1F23CF028D5A1C09B14B800054C601D60200DC000CD9000E00209F2F0D0D0A",
"IMEI" : "0351742100828112"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"version" : "7.2.0",
"hostname" : "PRODWILDIFY",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"input" : {
"type" : "log"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,405 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F23CF028D5A1C09B14B800054C601D60200DC000CD9000E00209F2F0D0D0A]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,405 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F23CF028D5A1C09B14B800054C601D60200DC000CD9000E00209F2F0D0D0A]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74995416
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "o2JaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_ignored" : [
"event.original.keyword",
"message.keyword"
],
"_source" : {
"YUMA-GPS-LOG" : {
"SIGNAL" : "false",
"ENGINE" : "0",
"LAT" : "23.78782",
"DOOR" : "0",
"INFO" : "true",
"GSM_SIGNAL" : "100",
"GPS STATUS" : "true",
"SERIAL" : "209F",
"GPS POS" : "true",
"COMMAND" : "INFO",
"O&E" : "CONNECTED",
"HEADING" : "198.0",
"FUEL" : "0.0V/0.0%",
"IMEI" : "0351742100828112",
"BATTERY" : "100.0%",
"LON" : "90.34119111111112",
"ALARM" : "NONE",
"GPS_SATS" : "15",
"SPEED" : "0.0",
"CHARGING" : "1",
"TIMESTAMP" : "Mon Apr 25 15:31:35 UTC 2022"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname" : "PRODWILDIFY",
"version" : "7.2.0",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"input" : {
"type" : "log"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,406 DEBUG (CONCOX-:22419) ()(17637444)>[TIMESTAMP:Mon Apr 25 15:31:35 UTC 2022],[IMEI:0351742100828112],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.34119111111112],[LAT:23.78782],[SPEED:0.0],[HEADING:198.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:15],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:209F]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,406 DEBUG (CONCOX-:22419) ()(17637444)>[TIMESTAMP:Mon Apr 25 15:31:35 UTC 2022],[IMEI:0351742100828112],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.34119111111112],[LAT:23.78782],[SPEED:0.0],[HEADING:198.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:15],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:209F]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74995605
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "pGJaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_source" : {
"YUMA-GPS-LOG" : {
"REQUEST" : "787822221604190F1F2DCF028D5A1C09B14B800054C601D60200DC000CD9000E0020A0035D0D0A",
"IMEI" : "0351742100828112"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname" : "PRODWILDIFY",
"version" : "7.2.0",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"input" : {
"type" : "log"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,409 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F2DCF028D5A1C09B14B800054C601D60200DC000CD9000E0020A0035D0D0A]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,409 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F2DCF028D5A1C09B14B800054C601D60200DC000CD9000E0020A0035D0D0A]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74996029
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "pWJaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_ignored" : [
"event.original.keyword",
"message.keyword"
],
"_source" : {
"YUMA-GPS-LOG" : {
"SIGNAL" : "false",
"ENGINE" : "0",
"LAT" : "23.78782",
"DOOR" : "0",
"INFO" : "true",
"GSM_SIGNAL" : "100",
"GPS STATUS" : "true",
"SERIAL" : "20A0",
"GPS POS" : "true",
"COMMAND" : "INFO",
"O&E" : "CONNECTED",
"HEADING" : "198.0",
"FUEL" : "0.0V/0.0%",
"IMEI" : "0351742100828112",
"BATTERY" : "100.0%",
"LON" : "90.34119111111112",
"ALARM" : "NONE",
"GPS_SATS" : "15",
"SPEED" : "0.0",
"CHARGING" : "1",
"TIMESTAMP" : "Mon Apr 25 15:31:45 UTC 2022"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"hostname" : "PRODWILDIFY",
"version" : "7.2.0",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"cloud" : {
"region" : "lon1",
"instance" : {
"id" : "135683766"
},
"provider" : "digitalocean"
},
"input" : {
"type" : "log"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,409 DEBUG (CONCOX-:22419) ()(17637444)>[TIMESTAMP:Mon Apr 25 15:31:45 UTC 2022],[IMEI:0351742100828112],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.34119111111112],[LAT:23.78782],[SPEED:0.0],[HEADING:198.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:15],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:20A0]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,409 DEBUG (CONCOX-:22419) ()(17637444)>[TIMESTAMP:Mon Apr 25 15:31:45 UTC 2022],[IMEI:0351742100828112],[COMMAND:INFO],[GPS STATUS:true],[INFO:true],[SIGNAL:false],[ENGINE:0],[DOOR:0],[LON:90.34119111111112],[LAT:23.78782],[SPEED:0.0],[HEADING:198.0],[BATTERY:100.0%],[CHARGING:1],[O&E:CONNECTED],[GSM_SIGNAL:100],[GPS_SATS:15],[GPS POS:true],[FUEL:0.0V/0.0%],[ALARM:NONE],[SERIAL:20A0]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74996218
}
}
},
{
"_index" : "filebeat-7.2.0-2022.04.25",
"_id" : "pmJaYYABZiia4yBwisFW",
"_score" : 0.06997609,
"_source" : {
"YUMA-GPS-LOG" : {
"REQUEST" : "787822221604190F1F37CF028D5A1C09B14B800054C601D60200DC000CD9000E0020A16F4F0D0A",
"IMEI" : "0351742100828112"
},
"ecs" : {
"version" : "1.0.0"
},
"agent" : {
"id" : "e47d8400-1077-4fd1-a56b-68e69e1b129e",
"version" : "7.2.0",
"hostname" : "PRODWILDIFY",
"ephemeral_id" : "f1aca50c-fd9a-4f61-a6d0-1c42388e930e",
"type" : "filebeat"
},
"cloud" : {
"region" : "lon1",
"provider" : "digitalocean",
"instance" : {
"id" : "135683766"
}
},
"input" : {
"type" : "log"
},
"@timestamp" : "2022-04-25T15:32:44.138Z",
"@version" : "1",
"event" : {
"original" : "15:32:43,413 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F37CF028D5A1C09B14B800054C601D60200DC000CD9000E0020A16F4F0D0A]"
},
"tags" : [
"beats_input_codec_plain_applied",
"_grokparsefailure"
],
"host" : {
"id" : "982b7b8d1795445e9b8a9a794550123f",
"containerized" : false,
"os" : {
"family" : "debian",
"kernel" : "4.15.0-171-generic",
"name" : "Ubuntu",
"version" : "18.04.5 LTS (Bionic Beaver)",
"platform" : "ubuntu",
"codename" : "bionic"
},
"name" : "PRODWILDIFY",
"hostname" : "PRODWILDIFY",
"architecture" : "x86_64"
},
"message" : "15:32:43,413 DEBUG (CONCOX-:22419) ()(17637444)>[IMEI:0351742100828112],[REQUEST:787822221604190F1F37CF028D5A1C09B14B800054C601D60200DC000CD9000E0020A16F4F0D0A]",
"log" : {
"file" : {
"path" : "/root/wildfly-11.0.0.Final/standalone/log/CONCOX.log"
},
"offset" : 74996642
}
}
}
]
}
}

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.