Possible values for "fields type" variable in a logstash forwarder config?

Elastic Stack Logstash
1

Hi,
I am configuring a logstash forwarder where there is a log created by my own application. This log has no relation to any syntax I have seen in several examples (syslog, apache, etc). So, when one is working with a very customized log file, which value should be used for the the "fields type" value? In fact, where I can find the list of all the possible values for the fields type variable?

This is my config file:

/etc/logstash-forwarder   
{
   "network": {
    "servers": [ "192.168.0.1:5000" ],
    "timeout": 15,
    "ssl ca": "/etc/pki/tls/certs/logstash-forwarder.crt"
},
   "files": [
        {
          "paths": [
          "/var/log/my_own_log.log"
          ],
          "fields": { "type": "VALUE???" }
        }
    ]
}

Thank you for any hint!

2

There is no fixed namespace for the type field. You can pick (almost) any string you want. Choose something descriptive for the kinds of log messages you're going to slap that type onto. If you're introducing a new kind of log with a different set of fields that the existing types it's probably wise to pick a new type name.

1 Like