# Postgres log preifx

**URL:** <https://discuss.elastic.co/t/postgres-log-preifx/142815>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 2, 2018, 10:25pm UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815 "2018-08-02T22:25:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![andreacfm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andreacfm/32/32243_2.png) [@andreacfm](https://discuss.elastic.co/u/andreacfm)\
**Post date:** [August 2, 2018, 10:25pm UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815/1 "2018-08-02T22:25:10Z")

</div>

I am having some issue in setting up the correct PG log prefix format that is then parsable by Grok as defined in the ingest module pipeline.  
Any suggestion?

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 3, 2018, 9:45am UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815/2 "2018-08-03T09:45:39Z")

</div>

The pipeline supposed to parse the default log format of Postgresql 9.5. So you don't need to configure Postgresql. What version are you running? What is the parsing error you are getting?

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 3, 2018, 9:46am UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815/3 "2018-08-03T09:46:30Z")

</div>

These are the example logs we are testing against: [https://github.com/elastic/beats/blob/master/filebeat/module/postgresql/log/test/postgresql-ubuntu-9.5.log](https://github.com/elastic/beats/blob/master/filebeat/module/postgresql/log/test/postgresql-ubuntu-9.5.log)

---

<div class="post-metadata">

**Author:** ![andreacfm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andreacfm/32/32243_2.png) [@andreacfm](https://discuss.elastic.co/u/andreacfm)\
**Post date:** [August 3, 2018, 2:38pm UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815/4 "2018-08-03T14:38:33Z")

</div>

@kvch I am running 9.6.8 installed using brew on my mac. The log does not have any prefix at all. Btw I will follow the examples you linked to adjust my logging settings.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 31, 2018, 2:38pm UTC](https://discuss.elastic.co/t/postgres-log-preifx/142815/5 "2018-08-31T14:38:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.