Logstash Parsing

(jorge) #1


I have a question, I am using ELK. In logstash, I have created my own parsings logs and I want to ask you if I can re-process the previous logs but using my new parsings.

Thank you very much

(David Pilato) #2

You can read old logs with an elasticsearch input plugin and apply whatever transformation you want then outpost to elasticsearch again.

I moved the question to #logstash.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.