Logstash not parsing multiple logs for different type


(Owais Ahmed) #1

Hi Team,

I have been looking for logstash configuration that should parse two different log types and to create different indexes for types. in my case i have .log and .CSV file types, That i'm capturing through filebeat using different prospects paths. here is the filebeat configuration.

Here is my logstash configurtaion.

I'm not getting the desired result, there is only index created in elastic with XYZlogs-date.
seams iis logs are not getting parsed , is that related to the if condition for iis. Any help from team is highly Appreciated.


(Andrew Cholakian) #2

I believe you are using the [type] when you should be using [@metadata][type]. See the Filebeat Logstash Output documentation for details.


(Owais Ahmed) #3

Thanks Andrew, after some tweaks it got set.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.