Hi everyone, can someone tell me why my log in the "terminal" type is in the index fr- * ?
Filebeat:
https://pastebin.com/zB1cefRe
Logstash conf files:
https://pastebin.com/BWUBVuLy
https://pastebin.com/hms3fMGz
Thank you in advance
Hi everyone, can someone tell me why my log in the "terminal" type is in the index fr- * ?
Filebeat:
https://pastebin.com/zB1cefRe
Logstash conf files:
https://pastebin.com/BWUBVuLy
https://pastebin.com/hms3fMGz
Thank you in advance
I think if [type] == "frinit" or "frdriver" {
should be if [type] in ["frinit", "frdriver"] {
and that if "ERROR" or "WARN" in [fr_log_level] {
should be changed to if [fr_log_level] in ["ERROR", "WARN"] {
. Not sure that is the only issue, but would start by changing that.
Thanks, this solved my problem.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.