I have set up filebeat with the IIS module. I have this sending to Logstash. My probkem is that I have a couple of servers with a couple of different configs for logging. Is there a way to tell filebeats/iis module to read the log file and build a key value pair then send that along?
For example in the header of the log file is defines the layout of the file and what fields are in the file. so I am looking for a log file coming into logstash where the message looks like cs-method=xyz useragent=abc and so on. Is this possible?
I am using logstash as I am sending the logs off to another syslog server
Thanks