I am having some issue in setting up the correct PG log prefix format that is then parsable by Grok as defined in the ingest module pipeline.
Any suggestion?
The pipeline supposed to parse the default log format of Postgresql 9.5. So you don't need to configure Postgresql. What version are you running? What is the parsing error you are getting?
These are the example logs we are testing against: https://github.com/elastic/beats/blob/master/filebeat/module/postgresql/log/test/postgresql-ubuntu-9.5.log
@kvch I am running 9.6.8 installed using brew on my mac. The log does not have any prefix at all. Btw I will follow the examples you linked to adjust my logging settings.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.