Input multiline and json


(Rafael Márquez Díaz) #1

Hi all,

My name is Rafa. I stared with logstash one week ago and I have a problem.

I need to read two types of logs from filebeat: json and multiline:

JSON:
{ "op": "kudos", "trans": "71", "version": "6.7.1", "environment": "pro" }

MULTILINE:
2017-01-26 11:20:02 UTC postgres postgres 127.0.0.1 22997 idle 1 0LOG: statement: SELECT datname,
SELECT ,,,,

I'm looking for a way to read this two types if logs at the same time, but I don't find a way.

Can somebody help me?


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.