Hi,
I am using elasticsearch, kibana and logstash for log analysis. All are of 6.2.4 versions.
My Question is :
I have different log files for a different purpose in one folder. Let's say "Sample" folder.
Under Sample folder, I have log files as shown below
D:/Sample/RS20180513.log
D:/Sample/OS20180513.log
D:/Sample/RS20180514.log
D:/Sample/OS20180514.log
D:/Sample/RS20180515.log
D:/Sample/OS20180515.log
etc..
All log filenames are created with a particular date.
How should be the configuration file so that when I run logstash from command prompt, it should create different indexes with the name as log filename for each log file in kibana.
Use a grok or dissect filter to extract the filename from the field containing the input filename (source, is it?), examples have been posted in the past, then reference that field in the index option of your elasticsearch output.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.