Output events from logstash as plain format

Elastic Stack Elasticsearch
1

We are using logstash-forwarder to forward syslog information to a remote
server running logstash. We would like for logstash to output the events
from the remote servers into in plain format. The problem we have is that
logstash outputs an event to the file like this:

{"message":"Mar 11 10:51:52 stage tayler: test", "@version":"1",
"@timestamp":"2015-03-11T16:51:55.612Z", "file":"/var/log/messages",
"host":"SERVERHOST", "offset":"6398", "type":"messages”}

What we want each event to look like is this:

Mar 11 10:51:52 stage user: test

Is it possible to either tell logstash to output events as plain format
into a file or to tell the remote logstash-forwarder instances to output
events as plain format to a remote server’s file?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

You'll get a much better response on the Logstash list :slight_smile:
See Redirecting to Google Groups

On 16 March 2015 at 12:26, Taylor Wood woodrow9003@gmail.com wrote:

We are using logstash-forwarder to forward syslog information to a remote
server running logstash. We would like for logstash to output the events
from the remote servers into in plain format. The problem we have is that
logstash outputs an event to the file like this:

{"message":"Mar 11 10:51:52 stage tayler: test", "@version":"1",
"@timestamp":"2015-03-11T16:51:55.612Z", "file":"/var/log/messages",
"host":"SERVERHOST", "offset":"6398", "type":"messages”}

What we want each event to look like is this:

Mar 11 10:51:52 stage user: test

Is it possible to either tell logstash to output events as plain format
into a file or to tell the remote logstash-forwarder instances to output
events as plain format to a remote server’s file?

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X8dxY5%2BOJGMg1VjWFa2CYy8Qug8NHErgmqrp-QTNYGK7Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.