indent preformatted text by 4 spaces
With this logstash configuration able to parse required value as column.
Sample Logstash configuration for creating a simple
Beats -> Logstash -> Elasticsearch pipeline.
input {
beats {
port => 5044
}
}
filter {
csv {
separator => "@$@"
columns => ["date","est_cd","hotelhubcode","sessionid","searchid","requestid","request","response","parentmethodname","starttime","endtime","duration","exception","notes","channelpropertyid"]
}
xml {
store_xml => "false"
source => "response"
remove_namespaces => "true"
xpath =>[
"/HotelCompleteAvailability_14/HotelCompleteAvailability/HotelPreformatted textMatch/BedType/text()","BedType",
"//HotelCompleteAvailability_14/HotelCompleteAvailability/HtlIndexedRateDesc[1]/DescriptionAry/Description[1]/text()","Description"
]
}
}
output {
elasticsearch {
hosts => ["http://localhost:9200"]
index => "4jun9"
#user => "elastic"
#password => "changeme"
}
}
indent preformatted text by 4 spaces