Query group by postifx

Elastic Stack Logstash
1

Hello everyone,
I was able to configure ELK cluster and grok for postfix, now I have a problem in finding information.
For every message sent I have 2 records similar to these

  • postfix_queueid, postfix_from
  • postfix_queueid, postfix_to, postfix_queueid, postfix_status

How can I do to have a single line with:

postfix_queueid, postfix_from, postfix_to, postfix_status

Thank you

2

Hello @zeliko79,

Your question doesn't seem to be related to Rally the Elasticsearch Benchmarking tool.

To get serve yourself and the community better, It would be best if you'd close the question here and re-open it under the Logstash category. Your logstash configuration would be helpful to include as well. Unless of course you are using the Elasticsearch Grok processor in which case the right category for this question would be Elasticsearch without Rally.

Dimitris

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.