Hi,
I send with Filebeat the file
/usr/local/tomcat/current/logs/filieredistribution_vodpublish.log
in Logstash.
I want to extract the filename without extension like this :
grok {
match => { "source" => [ "%{PATH}/%{GREEDYDATA:logfile}\." ] }
}
When I try on https://grokdebug.herokuapp.com/, it's ok :
{
"UNIXPATH": [
[
"/usr/local/tomcat/current/logs"
]
],
"logfile": [
[
"filieredistribution_vodpublish"
]
]
}
but in Logstash, I have this error :
[2017-07-07T09:22:22,333][WARN ][logstash.filters.grok ] Timeout executing grok '%{UNIXPATH}/%{GREEDYDATA:logfile}\.' against field 'source' with value '/usr/local/tomcat/current/logs/filieredistribution_vodpublish.log'!
[2017-07-07T09:22:22,333][WARN ][logstash.filters.grok ] Timeout executing grok '%{UNIXPATH}/%{GREEDYDATA:logfile}\.' against field 'source' with value '/usr/local/tomcat/current/logs/filieredistribution_vodpublish.log'!
I use Logstash and FileBeat in version 5.4.3.
I don't understand, can you help me ?
Thanks