Postgresql module not populating event fields (Windows)

Elastic Stack Beats
1

Hi,

I have enabled to the postgres module pointing to my log files. When i start filebeat i can see that is picks up the logs and processes them, but it does not seem to be populating the postgresql fields in the event

Config

  • module: postgresql

    All logs

    log:
    enabled: true

    Set custom paths for the log files. If left empty,

    Filebeat will choose the paths depending on your OS.

    var.paths: ["C://Program Files//PostgreSQL//9.6//data//pg_log//*.log"]

Event:

{
"_index": "eth-filebeat-6.2.1-2018.02.15",
"_type": "doc",
"_id": "zwu9mmEB7PoIeysneRls",
"_version": 1,
"_score": null,
"_source": {
"tags": [
"service-o",
"app-tier",
"beats_input_codec_plain_applied"
],
"host": "POSTGRESQL",
"source": "C:\Program Files\PostgreSQL\9.6\data\pg_log\postgresql-2017-06-09_000000.log",
"offset": 796555,
"@timestamp": "2018-02-15T18:32:37.747Z",
"message": "2017-06-09 15:35:30 BST STATEMENT: GRANT ALL ON SEQUENCE sds_org_person_seq TO "spinalTapAcc_nf ";",
"fields": {
"source_type": "filebeat",
"env": "ETH"
},
"beat": {
"name": "POSTGRESQL",
"hostname": "POSTGRESQL",
"version": "6.2.1"
},
"@version": "1",
"prospector": {
"type": "log"
},
"fileset": {
"module": "postgresql",
"name": "log"
}
},
"fields": {
"@timestamp": [
"2018-02-15T18:32:37.747Z"
]
},
"highlight": {
"fileset.module": [
"@kibana-highlighted-field@postgresql@/kibana-highlighted-field@"
]
},
"sort": [
1518719557747
]
}

2

What is your Postgresql version? Do you have custom a log format?
Could you share a few example input logs which cannot be parsed correctly?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.