Hello,
I have a job logs for DB2 and they are coming from filebeat.
I want to extract message, error code , table name, DB instance from logs to visualize them in kibana.
Logs are for DB instance : EXXXX
2019/03/08 21:35:01 DB2 Runstats command returned (RC=4):
connect to enablest
Database Connection Information
Database server = xxxx
SQL authorization ID = SOXDB
Local database alias = Exxxxx
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
Job los for PWXXX :
2019/03/08 21:35:05 Using TEMPFILE /tmp/sxxx
2019/03/08 21:37:26 DB2 Runstats command returned (RC=4):
connect to xxxxx
Database Connection Information
Database server = XXXX
SQL authorization ID = xxx
Local database alias = PXXXX
RUNSTATS ON TABLE SXXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
RUNSTATS ON TABLE SXXXX WITH DISTRIBUTION AND DETAILED INDEXES ALL ALLOW WRITE ACCESS
DB20000I The RUNSTATS command completed successfully.
Both of the logs are in same job log.
Could you please help how we can paste timestamp and DB instance at each log and then extract error code using grok in logstash.