Parsing logs of FIlebeat and send to Elastic search

Elastic Stack Beats
1

I am using filebeat to ship the logs directly to elastic search and then visualizing it in Kibana.

I want to parse the message field to fetch the response code(200 as per the below screenshot) as a separate field in Kibana. How can we do that in Filebeat.

Screenshot 2021-07-06 at 2.56.32 PM
Screenshot 2021-07-06 at 2.56.32 PM2164×456 42.1 KB

2

You can use the dissect processor, Dissect strings | Filebeat Reference [7.13] | Elastic or grok in logstash/elasticsearch.

3

As it looks like an Apache log, you can also try to use the Apache Module in filebeat to parse your message.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.