Log Filtering in ELK Stack

Hi Team,

I am new to ELK stack and I just setup an ELK stack which collects logs from tomcat log directory.

My requirement is it should only capture SEVERE AND ERROR messages in the log files present in the log directory.

Any ideas how to achieve it ?

Kind Regards,
Asif Bhat

Use a conditional in Logstash with a drop filter and you should be good.

1 Like

Thanks a lot Mark.

Any general document link that can be helpful here.

https://www.elastic.co/guide/en/logstash/6.2/config-examples.html#using-conditionals
https://www.elastic.co/guide/en/logstash/6.2/plugins-filters-drop.html

1 Like

Fantastic!!! Thanks a lot.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.