Hi, I am trying to execute a simple logstash config by using the grok patterns. Following is the total.conf file: input { tcp { port => 5000 type => meter } udp { port => 5000 type => meter } } filter { if [type] == "meter" { grok { patterns_dir => ["/etc/logstash/patterns"] …

Logstash "_grokparsefailure" in output

ash007 February 13, 2017, 7:28pm 7

I placed my filter.conf file after the file containing ruby filter and it worked.
Thank you @magnusbaeck.

Topic		Replies	Views
Grok tests pass, logstash still borks with "_grokparsefailure" Logstash	7	1504	July 6, 2017
Grokparsefailure with a pattern verified by grok debug Logstash	10	2856	September 22, 2017
Logstash (grokparsefailure) Logstash	4	1045	July 6, 2017
Howto eas{y\|ier} debug grok parse failures Logstash	5	14023	July 6, 2017
_grokparsefailure help Logstash	2	329	November 8, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash "_grokparsefailure" in output

Related topics