Skip to content

Instantly share code, notes, and snippets.

@omkar0001
Last active November 23, 2015 09:42
Show Gist options
  • Save omkar0001/99bf3ab11c648062c624 to your computer and use it in GitHub Desktop.
Save omkar0001/99bf3ab11c648062c624 to your computer and use it in GitHub Desktop.
input {
file {
path => "/home/ubuntu/idelivr-backend/*.log"
start_position => beginning
codec => multiline {
pattern => "^%{TIMESTAMP_ISO8601} "
negate => true
what => previous
}
}
}
filter {
grok {
match => { "message" => "%{TIMESTAMP_ISO8601:log_timestamp} %{WORD:log_level} %{WORD:module} %{POSINT:proc_id} %{GREEDYDATA:content}" }
}
}
output {
elasticsearch {}
stdout {}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment