Log stash

i Have logs with three different line like in message,out message and Error.
Have written 3 grok patterns for parsing to kibana.pat1,pat2,pat 3.
How to write a logstash if loop to parse if it is in message take pat1 ,if it is out message take pat2 and if it is error message take pat 3.

Please help.

It's super helpful if your topic titles are a summary of the problem, not just the word "Log stash". It doesn't really entice anyone to look at your topic and help.

thank you.i will correct myself

Why not just try all the grok expressions? The documentation of the grok filter's match option shows the syntax for listing multiple expressions in the same filter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.