Hey,
Still getting the same output without any splitting up of the 'message'. See attached image.
Here's my new config -
input {
file {
path => "C:/logstash-1.5.4/TempLight.log"
type => "sample"
start_position => "beginning"
}
}
filter {
grok { match => { "message" => [ "Time: %{DATESTAMP_RFC2822:time}", "Temp: %{NUMBER:temp}", "Light: %{NUMBER:light}", "Room: %{USERNAME:room}" ] } }
}
output {
elasticsearch {
protocol => "http"
}
stdout {}
}
Any suggestions?
