Hi, i have an ELK stack on docker and put logs througt "gelf", i need match logs by log format, i have two files (access.log and error.log, and one single tag "apache") i have this filter filter { if [tag] == "apache" { grok { match => { "message" => "%{COMBINEDAPACHELOG}" }…

Multiple grok match don't work

stefanocog May 17, 2017, 1:15pm 7

But if i comment the error.log grok, i have access logs correctly....i have already test with grokdebug and work

Topic		Replies	Views
Is there a way to tag for different grok matches? Logstash	5	6468	July 6, 2017
COMBINEDAPACHELOG did not add any matched fileds? Logstash	6	6994	December 20, 2016
2 grok filter NOT WOERKED ! :\| Logstash	6	1325	December 26, 2017
Matching multiple Grok patterns in a single Logstash config file Logstash	2	3532	May 30, 2017
Multiple grok filter Logstash	16	24144	October 3, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Multiple grok match don't work

Related topics