Parsing Apache Tomcat application Logs

Elastic Stack Logstash
1

Hi ,

I am trying to parse below Apache Tomcar Application log ,

2017-01-23 00:00:00,234 INFO [FTP_Channel-0] aps.pistribution (PhannelImpl.java:205) - FTP_Channel-0Refill completed>

Using below pattern ,

20%{YEAR}-%{MONTHNUM}-%{MONTHDAY}%{HOUR}:?%{MINUTE}(?::?%{SECOND})%{SPACE}%{LOGLEVEL:level}%{SPACE}[%{GREEDYDATA:Channel}]%{SPACE}%{WORD:Project}%{SPACE}%{JAVACLASS:class}%{SPACE}%{GREEDYDATA:logmsg}

My Complete Logstash Conf Looks like this

Kafka Conf.png1073×530 10.7 KB

Can anybody help me find missing piece here..

thanks a lot in advance

@magnusbaeck please help..

2

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.

You haven't really mentioned what the problem is here, so it's hard to help.

Also, please don't do that. Magnus is not your Obi-Wan Kenobi.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.