Hey all,
I’m new to Logstash (and ELK) I’ve been playing with it for the past couple weeks here at work. I have a project where a business unit wants to track activity on our company portal page. What I’m looking to do is add a field, tag ect. to each uristem that’s easy to read; example: /something/home.aspx = “portal home” page. Im doing this so the data is readable to a non-computer/html savvy business member. I have been able to add a couple (10 I think) with if [uristem] == /something/home.aspx > mutate > add field = homepage, but after a large number of these the program fails. I’ve tried in both nxlog and logstash. Is there a way to complete this task? Any help would be greatly appreciated! I’m at a loss at the moment.
Magnus you are the man !! thanks again !!