PostgreSQL Module: What is the "EXPECTED" format (I.E. postgresql.conf settings)

Elastic Stack Beats
1

for the filebeat PostgreSQL module, what are the expected settings in postgresql.conf (for the PostgreSQL server) on the logging related parameters, Prefix, etc.

I've searched and searched and would love to have this documented, especially for PostgreSQL 11.x

2

Hi,

This is the grok filter used by the posgresql module:
"grok" : {
"patterns" : [
"""^%{DATETIME:postgresql.log.timestamp} [%{NUMBER:process.pid:long}(-%{BASE16FLOAT:postgresql.log.core_id:long})?] (([%{USERNAME:user.name}]@[%{POSTGRESQL_DB_NAME:postgresql.log.database}]|%{USERNAME:user.name}@%{POSTGRESQL_DB_NAME:postgresql.log.database}) )?%{WORD:log.level}: (duration: %{NUMBER:temp.duration:float} ms statement: %{GREEDYDATA:postgresql.log.query}|%{GREEDYDATA:message})"""
],
I hope this help to show what the module expects.

Cheers

3

Filebeat modules usually parse the output of the default format. Is that not working in your case?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.