Hi I have created one logstash conf file but I am running the same config file on two machine, one is mac and other is ubbuntu.
For the same input data on my mac I am getting the correct output where as in ubuntu I am getting _grokparsefailure.
I am not sure why this is happening
MAC
2020-08-20 11:25:33.301770528 re0:app:1 APP Function = "function_name", IP = "1.1.1.2/32", Msg = "OnAdd"
{
"match_2" => "OnAdd",
"traceType" => "APP",
"ipv4Address" => "1.1.1.2",
"functionName" => "function_name",
"timestamp" => "2020-08-20 11:25:33.301770528",
"match_1" => "IP = "1.1.1.2/32", Msg = "OnAdd"",
"@timestamp" => 2021-02-09T16:44:32.976Z,
"message" => "2020-08-20 11:25:33.301770528 re0:app:1 APP Function = "function_name", IP = "1.1.1.2/32", Msg = "OnAdd"",
"host" => "mac",
"tags" => [
[0] "_grokparsefailure"
],
"pid" => "1",
"program" => "app",
"node" => "re0",
"@version" => "1"
}
UBUNTU
2020-08-20 11:25:33.301770528 re0:app:1 APP Function = "function_name", IP = "1.1.1.2/32", Msg = "OnAdd"
{
"program" => "app",
"host" => "ubuntu",
"timestamp" => "2020-08-20 11:25:33.301770528",
"tags" => [
[0] "_grokparsefailure"
],
"node" => "re0",
"pid" => "1",
"match_1" => "IP = "1.1.1.2/32", Msg = "OnAdd"",
"functionName" => "function_name",
"@version" => "1",
"traceType" => "APP",
"@timestamp" => 2021-02-09T16:39:03.941Z,
"message" => "2020-08-20 11:25:33.301770528 re0:app:1 APP Function = "function_name", IP = "1.1.1.2/32", Msg = "OnAdd""