Unable to process the log files to logstash and to kibana

Elastic Stack Beats
1

Hi All -

I am brand new to the Elasticsearch products and just trying to learn and getting my hands into it. I need your help / suggestions to overcome with the issues. Can you please guide me here pls?

Here is where I am - I managed to setup pipeline successfully, and able to load sample logs to logstash and to kibana. However, when I try to load the user logs from my custom application, the log is not consumed despite of the logstash running. Can you please help what could be the cause and next steps to consider?

Checks done from my side:

  1. verified configurations in logstash.yml
  2. verified configurations in filebeat.yml
  3. pipleline conf. looks good
  4. grok filter - i feel its ok but not sure. I am just trying to filter with "Started" keyword from the log

filter {
grok {
match => { "message" => "%{Started}"}
}
geoip {
source => "clientip"
}

Please refer to the sample log attached for the reference

User log.jpg1592×157 95 KB

Thanks in Advance for your help !

Regards
Raj

2

Can you share your filebeat config and filebeat logs? Which versions of the tools are you using?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.