Commit db17a8d3 authored by Alcides Viamontes E's avatar Alcides Viamontes E

See if we can mount it

parents
Mount inside logstash, at /usr/share/logstash/pipeline/
input { beats {
port => 5044
}
}
filter {
date {
match => [
"when", "yyyy-MM-ddD HH:mm:ss"
]
}
grok {
match => {
"message" => "Uploaded %{NUMBER:uploaded_msg_count:integer} messages"
}
}
# grok {
# match => {
# # Level: INFO, Time: 2018-05-15 08:36:42,211, Message: Uploaded 1000 messages
# "message" => "Level\: %{LOGLEVEL:log-level}, Time\: %{DATESTAMP:datestamp}[,0-9]* Message: .*"
# }
# }
}
output {
elasticsearch {
"hosts" => ["elasticsearch:9200"]
"template" => "/etc/es_default_mapping_template.json"
}
}
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment