Skip to content

Instantly share code, notes, and snippets.

@pradeepchhetri
Created January 3, 2014 12:22
Show Gist options
  • Save pradeepchhetri/8237099 to your computer and use it in GitHub Desktop.
Save pradeepchhetri/8237099 to your computer and use it in GitHub Desktop.
Indexer Config
input {
redis {
data_type => list
key => logstash
host => "test-host"
port => 6379
threads => 2
}
}
filter {
grok {
patterns_dir => "./patterns"
match => [ "message", "<%{POSINT:syslog_pri}>%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{NOTSPACE:client_ip} - \[%{HTTPDATE:time_local}\] %{QS:request} %{INT:status} %{NUMBER:request_time} %{INT:bytes_sent} %{QS:http_referer} %{QS:http_user_agent} %{NOTSPACE:upstream_addr} %{NOTSPACE:upstream_response_time} %{GREEDYDATA:pipe}" ]
}
}
output {
elasticsearch_http {
host => "127.0.0.1"
workers => 4
}
}
@pradeepchhetri
Copy link
Author

Sample Log:

<13>Jan 3 17:19:05 10.65.40.148 202.91.143.61 - [03/Jan/2014:13:33:37 +0530] "GET /ajax/browse/getTopProducts?cat=lifestyle&type=new-arrivals&__FK=V225ec9c70f013486a4743d81de977dbedd1t13kcTXDHBx7CPY3ghnJ7BykYxGVgD8Yb8FmZV5evDAS9D9RFG7I7UZyaDYHQGoANadNqPBLr6lS1UKtKAEWI91cw%3D%3D HTTP/1.1" 200 0.132 44752 "http://www.google.com/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36" 127.0.0.1:25001 0.128 . -

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment