Hello Community,
I am trying to parse simple log and here is my log and logstash parsed output.
2018-09-06 12:31:50,289 INFO [http-nio-8080-exec-10] [test@test.com] [POST - /platform-services/api/v1/static-data/picklist/delinquencyReasons] WebLoggingFilter - Iovation tracking disabled
Logstash o/p
logstash | {
logstash | "@version" => "1",
logstash | "Request-type" => "GET",
logstash | "field2" => "Request",
logstash | "tags" => [
logstash | [0] "webapp-prod",
logstash | [1] "platform-services"
logstash | ],
logstash | "beat" => {
logstash | "hostname" => "ip-10-2-1-245",
logstash | "version" => "6.4.0",
logstash | "ip" => "10.2.1.245",
logstash | "name" => "ip-10-2-1-245"
logstash | },
logstash | "field1" => "[http-nio-8080-exec-7]",
logstash | "offset" => 2039810,
logstash | "Severity" => "INFO",
logstash | "user" => "test@test.com",
logstash | "@timestamp" => 2018-09-06T10:09:24.591Z,
logstash | "source" => "/usr/share/tomcat8/logs/test.log",
logstash | "class-name" => "WebLoggingFilter",
logstash | "message" => "Iovation tracking disabled",
logstash | "prospector" => {
logstash | "type" => "log"
logstash | },
logstash | "Request" => "/platform-services/api/v1/static-data/picklist/delinquencyReasons",
logstash | "input" => {
logstash | "type" => "log"
logstash | },
logstash | "id" => "-"
logstash | }
I am using default filebeat template. I believe that is where I am having issue but I am expecting filebeat has default dynamic template which maps to strings . If I am wrong please suggest where exactly to check