HI Team,
I'm wondering with my configuration. Logstash is up and running but fail to parse data into elasticsearch, please find my conf below and correct me if am i doing any wrong,
I'm running using windows
input {
file {
path => "C:\Ganesh\logs\log\database.log"
codec => multiline {
pattern => "[\[A-Z\]]+ [0-9- :,]+"
negate => "true"
what => "next"
}
start_position => "beginning"
}
}
filter{
grok {
match => { "message" => "\[%{WORD:debug}] %{TIMESTAMP_ISO8601:timestamp} \[%{GREEDYDATA:thread}\] %{WORD:LogType} \{sessionId=%{INT:SessionID}\} - ?(?<errorDescription>[a-zA-Z0-9 \n\s-`!@#$%^&*':\".,(){}\[\]~]+)" }
}
}
output {
elasticsearch {
hosts => ["http://localhost:9200"]
index => "t24-%{+YYYY.MM.dd}"
}
}