Logstash grokparsefailure


#1

my serio:
filebeat read log info from file, then kafka, logstash consume log from kafka and write elasticsearch.
But sometimes, in logstash ,there are half-baked log (a section of a log event), so grok parse failure;
sometimes, log is messy code;
why? someone help??
thanks!


(Magnus B├Ąck) #2

It's completely impossible to help without additional details. What do you the broken log entries look like? What does your configuration look like?


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.