I have show error in my Logstash log:-
rating root-level values
at [Source: [B@25cc18c4; line: 1, column: 4]>, :data=>"29/Oct/2018:07:22:33 +0000 103.216.238.37 IN 0.169 172.69.135.147 - GET /account/subscription HTTP/1.1 200 2051 http://localhost:4200/dashboard Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 103.216.238.37 2 715 32556 0.169\n", :level=>:error}
{:timestamp=>"2018-10-29T13:10:11.099000+0000", :message=>"JSON parse failure. Falling back to plain-text", :error=>#<LogStash::Json::ParserError: Unexpected character ('/' (code 47)): Expected space sepa
My config is:-
input {
s3 {
bucket => "xxxxxxxxxx"
credentials => ["access_key_id", "secret_access_ke"]
region_endpoint => "xxxxxxxxxxx"
#region => "xxxxxxxxxxx"
#access_key_id => "xxxxxxxxxxxxxxxxxxxxxx"
#secret_access_key => "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
codec => json {
charset => "ISO-8859-1"
}
}
}
filter {
grok {
match => {"message" => "Pattern"}
}
}
output {
#stdout {
#codec =>json
#}
elasticsearch {
hosts => "localhost:9200"
#port => "9200"
codec => json {
charset => "ISO-8859-1"
}
}
}