Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save aloha1003/9c13c832d2c18f56db7a3b63457edffd to your computer and use it in GitHub Desktop.
Save aloha1003/9c13c832d2c18f56db7a3b63457edffd to your computer and use it in GitHub Desktop.
Logstash configure for parse json from text file
filter {
grok {
match => { "message" => "^\[%{TIMESTAMP_ISO8601:datetime}\]\s+%{DATA:env}\s+%{LOGLEVEL:loglevel}+\:%{GREEDYDATA:log_msg}" }
add_field => {
"received_at" =>"%{datetime}"
"enviroment" => "%{env}"
"log_level" => "%{loglevel}"
}
}
json{
"source" => "log_msg"
"target" => "parsedMsg"
"remove_field" => ["log_msg"]
}
mutate {
"add_field" => {
'file' => "%{[parsedMsg][message][debug_backtrace][file]}"
'function' => "%{[parsedMsg][message][debug_backtrace][function]}"
'args' => "%{[parsedMsg][message][debug_backtrace][args]}"
'line' => "%{[parsedMsg][message][debug_backtrace][line]}"
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment