# Parsing Apache Tomcat application Logs

**URL:** <https://discuss.elastic.co/t/parsing-apache-tomcat-application-logs/72746>\
**Category:** Logstash\
**Created:** [January 25, 2017, 9:37am UTC](https://discuss.elastic.co/t/parsing-apache-tomcat-application-logs/72746 "2017-01-25T09:37:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pDonS](https://avatars.discourse-cdn.com/v4/letter/p/b4bc9f/32.png) [@pDonS](https://discuss.elastic.co/u/pDonS)\
**Post date:** [January 25, 2017, 9:37am UTC](https://discuss.elastic.co/t/parsing-apache-tomcat-application-logs/72746/1 "2017-01-25T09:37:59Z")

</div>

Hi ,

I am trying to parse below Apache Tomcar Application log ,

2017-01-23 00:00:00,234 INFO [FTP\_Channel-0] aps.pistribution (PhannelImpl.java:205) - FTP\_Channel-0Refill completed\>

Using below pattern ,

20%{YEAR}-%{MONTHNUM}-%{MONTHDAY}%{HOUR}:?%{MINUTE}(?::?%{SECOND})%{SPACE}%{LOGLEVEL:level}%{SPACE}[%{GREEDYDATA:Channel}]%{SPACE}%{WORD:Project}%{SPACE}%{JAVACLASS:class}%{SPACE}%{GREEDYDATA:logmsg}

My Complete Logstash Conf Looks like this

 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/6dcde3413e4c53aaa35755391698f510d13dbc19.png)

Can anybody help me find missing piece here..

thanks a lot in advance

@magnusbaeck please help..

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 29, 2017, 4:26am UTC](https://discuss.elastic.co/t/parsing-apache-tomcat-application-logs/72746/2 "2017-01-29T04:26:23Z")

</div>

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.

You haven't really mentioned what the problem is here, so it's hard to help.

> [@pDonS](#):
>
> @magnusbaeck please help..

Also, please don't do that. Magnus is not your Obi-Wan Kenobi.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 26, 2017, 4:26am UTC](https://discuss.elastic.co/t/parsing-apache-tomcat-application-logs/72746/3 "2017-02-26T04:26:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.