Missing fields - Postgresql Module

Elastic Stack Beats
,
1

Hi

I'm using filebeat 7.1.0 - PostgreSQL module to send logs from the DB to Elasticsearch, from the logs I want to extract event.duration and log.postgresql.query but filebeat only send this information in some logs and in otherlogs are missing; I don't know if someone had this issue in the past and know how to solve it.

Thanks.

Regards.

2

Hi, Luis Zabala!
Filebeat and module - it regexp rules for parsing logs... so some logs have different format - and in this case filebeat-module cant extract event.duration and log.postgresql.query.
So - check problem logs format - and check module regexp - for find answer - why field missing.

3

Agreed!

If you find a log message that is not being correctly processed, please report it so we can update the patterns to support it.

Best regards

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.