Log Filtering in ELK Stack


(Asif Bhat) #1

Hi Team,

I am new to ELK stack and I just setup an ELK stack which collects logs from tomcat log directory.

My requirement is it should only capture SEVERE AND ERROR messages in the log files present in the log directory.

Any ideas how to achieve it ?

Kind Regards,
Asif Bhat


(Mark Walkom) #2

Use a conditional in Logstash with a drop filter and you should be good.


(Asif Bhat) #3

Thanks a lot Mark.

Any general document link that can be helpful here.


(Mark Walkom) #4

https://www.elastic.co/guide/en/logstash/6.2/config-examples.html#using-conditionals
https://www.elastic.co/guide/en/logstash/6.2/plugins-filters-drop.html


(Asif Bhat) #5

Fantastic!!! Thanks a lot.


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.