Parsing Log4j


(Eshwar Kumar ) #1

To parse log4j logs in the logstash .i need a standard configuration file using different filter plugins. if anybody have the file please help me out


(Magnus Bäck) #2

Log files written by Log4j come in a thousand shapes and colors so there is no standard configuration file for processing them.


(Eshwar Kumar ) #3

can you please send me the different sample logs


(Magnus Bäck) #4

???

You're probably going to want a grok filter for parsing your logs. Unless you're familiar with regular expressions I suggest you use the grok constructor web site to get help building your grok expression.

Depending on what your logs look like and how you want to parse them the dissect filter might do. It's probably easier to understand but it's less flexible.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.