Hello,
I am having problem with loading log file from logstash to elasticsearch. Could you please help?
Input file line {TYPE:POS, LOCATION:001, DESK:4010, TRAN:1516}
Out put expecting:-
"TYPE" : POS
"LOCATION" : 001
"DESK" : 4010
"TRAN" : 1516
But corresponding values not showing when loading into Kibana...
logstash config:-
input {
file{
path => "/Users/Dashboard/POSTEST.log"
start_position => "beginning"
}
}
filter
{
grok{
match => { "message" => "%{WORD:TYPE}, %{NUMBER:LOCATION}, %{NUMBER:DESK}, %{NUMBER:TRAN} " }
}
kv {
value_split => ","
}
}
output {
elasticsearch { hosts => ["127.0.0.1:9200"] }
stdout { codec => rubydebug }
}
Kibana:-
@timestamp May 9th 2016, 00:34:06.307
t@version 1
t_id abcgsHSKK
t_index logstash-2016.05.09
#_score
t_type logs
thost AVBHGSKL.abcdefgh.net
tmessage {TYPE:POS, LOCATION:001, DESK:4010, TRAN:1516}
tpath /Users/Dashboard/POSTEST.log