Hi, I have a log file that I need to parse. I'm forwarding the log from a remote server using FileBeat. My log file content looks like this: ip address, data (characters and numbers). My logstash conf file looks like this: input { beats { port => "5043" } } filter { geoip { source => "mes…

Just kidding, its working! :smile: I was looking at the wrong index :confused: Works much better if you look at the right index in Kibana! :slight_smile:

Discuss the Elastic Stack

Parsing custom field with logstash

Elastic Stack Logstash

mohsin106 (Mohsin) February 27, 2017, 5:31pm 2

Just kidding, its working!

I was looking at the wrong index

Works much better if you look at the right index in Kibana!

Topic		Replies	Views
Creating custom fields and populating them from log data Beats filebeat	5	5269	March 15, 2017
How to use custom fields from filebeat in logstash? Logstash	2	4816	October 14, 2018
Reading beats fields from Kafka input Logstash	3	1185	March 27, 2017
Turn Packetbeat IP data from String to IP field type Logstash	5	1957	July 6, 2017
Failed to parse field [host] Logstash	8	4711	June 22, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Parsing custom field with logstash

Related topics