Hello everyone, me and my friends are working in a project and stumbling upon a quiet confused method. So we want for logstash to read logs given from source (syslog) and then insert them to mysql database if it matches our condition, such as if the "message" field contains a word "Error".
I found that jdbc plugin can be used in logstash configuration to read and parse the syslog to the database. I had tested it for inserting data on the output section. But, I cant use the jdbc parameters on the input section. Is it not possible for two jdbc parameters on both input and output section and on the same configuration? Sorry for the long question but this is the only way I can came out with.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.