Logstash and Mysql logs

Elastic Stack Elasticsearch
1

Hi. I have a problem with a JSON logs from mysql servers. I send such logs to logstash but they don't get into elastic and give no error. If I change single quotes for 'alerts test' to double quotes "alerts test" everything is ok. But how to make single quotes parse correctly or track down the error?

{
  "audit_record": {
    "name": "Query",
    "record": "467509661_2020-07-24T06:56:21",
    "timestamp": "2021-01-12T15:29:35 UTC",
    "command_class": "select",
    "connection_id": "23043788",
    "status": 0,
    "sqltext": "SELECT 'alerts test' FROM tests.tests LIMIT 2",
    "user": "test[test] @  [192.168.2.18]",
    "host": "",
    "os_user": "",
    "ip": "192.168.2.18",
    "db": ""
  },
  "HOST": "test",
  "UNIXTIME": 1610465376
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.