Using Grok to add SID field to oracle database logmessages

Elastic Stack Logstash
3

Hi Magnus,

The input part is:-

input {
  file {
		path => "/apps/codi/elk/data/oracle/alert_*.log"
		start_position => beginning 
		sincedb_path => '/opt/logstash/sincedb_oracle.db' 
		sincedb_write_interval => 0 
		type => 'oracle_alert_log'
  }
}

Regards,
Debarun.