Pushing log to elastic.co and splitting message

Hi,

I'm using elastic.co and filebeat.

My config is:

cloud.id:
cloud.auth:
filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /var/www/vhosts/doomain/logs/access_ssl_log
  tags: domain
  fields:
    log_type: "apache_access"

log file is pushed, but message is not splitted into any fields (see screenshot).

could you point me should I do something more to split message into IP, etc?

I'm completely new to elastic.co.

thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.