Hey folks, I have .conf as input { beats { port => 5044} } filter { grok { match => [ "message", "%{TIMESTAMP_ISO8601:timestamp_sting}%{SPACE}%{GREEDYDATA:line}" ] } date { match => ["timestamp_sting", "ISO8601"] } mutate { remove_field => [message, timestamp_sti…

Incorrect mapping not matching grok filers and fields .conf file

asad_ali (asad ali) June 18, 2019, 6:28pm 5

I tried to remove the host.metadata not extra fields are dropped down to 34 from 51. I opened new link here

Topic		Replies	Views
Logstash showing logs send to Kibana with yellow index and mismatched pre-populated fields mapping Logstash	1	288	July 14, 2019
Can't fix _grokparsefailure Logstash	6	471	January 9, 2019
Incorrect mapping of fields by Kibanna send from logstash Beats filebeat	4	467	July 18, 2019
Filebeat error using ingest pipeline: Provided Grok expressions do not match field value Beats filebeat	4	6136	June 15, 2017
Grok Filter not extracting the fields Logstash	8	1227	August 10, 2017