Logstash failed to index data in elasticsearch

(Ganesh) #1

HI Team,
I'm wondering with my configuration. Logstash is up and running but fail to parse data into elasticsearch, please find my conf below and correct me if am i doing any wrong,

I'm running using windows

input {
  file {
    path => "C:\Ganesh\logs\log\database.log"
	codec => multiline {
		pattern => "[\[A-Z\]]+ [0-9- :,]+"
		negate => "true"
		what => "next"
	}
	start_position => "beginning"
  }
}
filter{
	grok {
    match => { "message" => "\[%{WORD:debug}] %{TIMESTAMP_ISO8601:timestamp} \[%{GREEDYDATA:thread}\] %{WORD:LogType} \{sessionId=%{INT:SessionID}\} - ?(?<errorDescription>[a-zA-Z0-9 \n\s-`!@#$%^&*':\".,(){}\[\]~]+)" }
  }
}
output {
  elasticsearch {
    hosts => ["http://localhost:9200"]
    index => "t24-%{+YYYY.MM.dd}"
  }
}
(system) closed #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.