JSOn data:
{
"EventID":1,
"MachineName":''ABC',
EntryType" :"Error",
"Message" : "Stopped",
"Source":"ABC",
"TimeGenerated":"06/23/2020 06:50:40",
"TimeWritten":"06/23/2020 06:50:40",
"UserName": "",
"Site": ""
}
logstash configuration:
input
{
beats
{
host => "localhost"
port=>9600
codec=> "json"
}
}
output{
elasticsearch{
hosts=>{"localhost:92000"
index=>"json-index"
}
}