gistfile1.txt

input {
  stdin {
    type => "apache-access"
  }
}


filter { 
  grok {
    type => "apache-access"
    pattern => "%{COMBINEDAPACHELOG}"
    patterns_dir => "/opt/logstash/etc/patterns"
  }

  date {
    type => "apache-access"
    timestamp => "dd/MMM/yyyy:HH:mm:ss Z"
  }

  grep {
    match => [ "@tags", "_grokparsefailure" ]
    negate => true
    type => "apache-access"
  }
}

output {
  stdout {
    debug => true
  }
}

# Using for test:
# 127.0.0.1 - - [09/Feb/2012:17:32:31 +0100] "GET / HTTP/1.1" 505 548 "http://host/?q=test" "Agent" 0