Logstash add tags


(Luis) #1

elk is installed, logs from filebeat come from another server
logs in format

2018-11-16 17:26:12 [http-nio-127.0.0.1-8080-exec-6] DEBUG c.j.m.helpers.EmailHelper - MAIL WAS SENT, manage post
Fri Nov 16 17:26:12 UTC 2018 WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.
2018-11-16 17:26:12 [http-nio-127.0.0.1-8080-exec-91] ERROR c.j.m.c.e.PostExceptionController - You are only allowed to post once every 15m.
Come back a little later [in 00:14:57]

how can I set up a DEBUG WARN ERROR sample in kibana, I need to set up a tag or field or something else, tell me how


(Luis) #2

add logstash

filter {
    grok {
        match => {
            "message" => "%{LOGLEVEL:loglevel}"
        }
    }
}