I'm having a log file, which actually has INFOs' and ERRORs. So I tried to match only the needful INFOs by using the grok filter. So this is how my log lines look like. Few of them from the file. And this is how my grok look like in my logstash conf: grok { patterns_dir => ["D:/elk_stack_for_ide…

Add remove_field => ["message"] to your grok filter to remove the message field if the filter is successful. To drop events where grok failed: if "_grokparsefailure" in [tags] { drop { } }

system (system) Closed March 5, 2017, 10:00am 7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Drop some line when match in logstash Logstash	2	6550	April 25, 2017
Match part of a log Logstash	4	615	July 6, 2017
Index matched patterns and drop unmatched Logstash	2	621	June 4, 2019
Drop all grok matches Logstash	10	4136	September 14, 2017
How Can I find unmatched logs with pattern grok? Logstash	2	1178	October 19, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Is it possible to index only the matched log lines of grok in Logstash?

Related topics