Hi all, I would like to monitor a directory, where per event a file is written; each event-file consists of several key=value pairs. > /var/log/dir/history.* > head /var/log/dir/history.1234 key1 = value1 key2 = value2 ... I put the kv filter plugin on the files and in principle it…

Parsing whole file as a single event

Badger September 21, 2020, 1:59pm 2

Answered here.

1 Like

Topic		Replies	Views
Parse a file as a whole having key value pairs Logstash	2	984	July 11, 2019
Is it possible to combine the entire file as one event? Logstash	5	2119	July 6, 2017
Newbie questions about KV filter Logstash	3	480	July 6, 2017
Parse multiline xml config file into one event, not many Logstash	1	823	November 13, 2017
Parsing multiline events with logstash Logstash	1	277	May 21, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Parsing whole file as a single event

Related topics