Please suggest me the filter/expression to be used for the event to metric data format conversion


(Arun Gan) #1

I am trying to convert my event logs into influx protocol format using GROK filter. So i am trying to come up with a GROK filter to convert the below log .

For example:,

Input event log(From a node to log-stash) :
55.3.244.1 GET /index.html 15824 0.043

Log-stash Output (After applying GROK Filter):
responseTime, _blossom_id=abc, host=55.3.244.1 timeTaken=0.043 1465839830100400200

I couldn't come up with a GROK filter that can do this conversion. Can someone please help me with this conversion ?


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.