i have below setup
Filebeat->es<-Kibana
i need to capture 3 api logs with order id .
I have logs like below ::
2020 Feb 19 10:10:06:136---> API 1 order id -<>
<<---SOAP XML Payload logs of API 1 -->>
2020 Feb 19 10:10:06:136---> API 2 order id -<>
<<---SOAP XML Payload logs of API 2 -->>
2020 Feb 19 10:10:06:136---> API 3 order id -<>
<<---SOAP XML Payload logs of API 3 -->>
I need to have search something like
- orderid which will fetch all the order id logs
- Something like orderid + api1 -->should fetch logs only of -SOAP XML Payload logs of API 1
Similarly orderid + api2-->should fetch logs only of -SOAP XML Payload logs of API 2
etc .
Can anyone suggest the best way to implement this . Search queries will be from kibana.
ES VERSION : -7.5.2020