Log Filtering in ELK Stack

Elastic Stack Elasticsearch
1

Hi Team,

I am new to ELK stack and I just setup an ELK stack which collects logs from tomcat log directory.

My requirement is it should only capture SEVERE AND ERROR messages in the log files present in the log directory.

Any ideas how to achieve it ?

Kind Regards,
Asif Bhat

2

Use a conditional in Logstash with a drop filter and you should be good.

1 Like
3

Thanks a lot Mark.

Any general document link that can be helpful here.

4

https://www.elastic.co/guide/en/logstash/6.2/config-examples.html#using-conditionals
https://www.elastic.co/guide/en/logstash/6.2/plugins-filters-drop.html

1 Like
5

Fantastic!!! Thanks a lot.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.