Hello Community, I having issue with parsing AWS Waf logs using Logstash filter plugin, here is the breakdown I'm pulling logs from AWS using kinesis input and the I'm filtering the log message using :- filter { json { source => "message" } mutate { add_field => { "action" => …

Hello @Badger thanks for the replay I finnally solved this issue by using codec => cloudwatch_logs plugin which decoded my logs.

Discuss the Elastic Stack

Json filter not parsing AWS WAF Logs

Elastic Stack Logstash

laale1 (laale) November 29, 2023, 11:45am 6

@Badger hey bro can you also help me this issue https://discuss.elastic.co/t/profile-file-cannot-be-null-logstash-error/348224?u=laale1

thanks

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.