Hi, I am currently using default logstash configuration to parse the apache server access log file and index it to elasticsearch. However, I don't want to parse all fields in log but say specific ones like IP, Referrer, status code, etc. How can I selectively specify in configuration of logstash …

Parsing specific values from logs in logstash configuration

warkolm (Mark Walkom) February 16, 2017, 6:34am 2

You need to parse them all, then use remove_field to drop things.

Topic		Replies	Views
Add filter to send specific fields to elasticsearch Logstash	12	1811	March 12, 2019
Logstash Filter incoming data Logstash	8	1507	August 18, 2021
How to parse particular text string from logs and send to index? Logstash	12	3864	May 26, 2017
Parsing a logstash file Logs	2	33	December 1, 2025
Creating Logstash Configuration Logstash	12	1789	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Parsing specific values from logs in logstash configuration

Related topics