Monitoring the logstash postfix queue

Elastic Stack Logstash
1

Hi all, mb its stupid idei, but i want monitoring postfix queue .
I write in file "data", "hostname", "count", how can I transfer this data to elastic?
at the moment, i am parse postfix logs, thanks to GitHub - whyscream/postfix-grok-patterns: Logstash configuration and grok patterns for parsing postfix.
And i add in filter logstash

filter {
    grok {
          match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST} %{DATA:program}(?:\[%{POSINT}\])?: %{GREEDYDATA:message}" }
          match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{HOSTNAME} %{NUMBER:postfix_queue}" }
          overwrite => ["timestamp", "message"]
   }

match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{HOSTNAME} %{NUMBER:postfix_queue}" }
add in filebeat.yml
- /var/log/postfix_queue.log
I understand that now need to create a new field in the postfix_queue index?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.