Hi, I cannot get logstash to output exchange 2013 tracking logs properly. Can anyone help? Logstash Config: input { beats { port => 5044 type => "ex_msg_trk" } } filter { if [type] == "ex_msg_trk" { grok { match => { "message" => "(%{TIMESTAMP_ISO8601:date-time})?,(%{IPORHOST:client-ip}…

Logstash - Exchange 2013 Message Tracking

system (system) Closed September 20, 2018, 12:39pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Exchange Message Tracking Logstash	4	7721	July 11, 2017
[Elastic][Logstash] Ask for help on parsing the Microsoft exchange logs Logstash	3	1630	May 2, 2018
Communication Problem between logstash and elasticsearch Elasticsearch	3	1321	July 6, 2017
How to use multiple inputs in Logstash? Logstash	12	26745	July 6, 2017
Logstash shipping results Logstash	12	893	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash - Exchange 2013 Message Tracking

Related topics