Skip to content

Instantly share code, notes, and snippets.

@tebriel
Last active August 29, 2015 14:12
Show Gist options
  • Save tebriel/3bb69d64d9bfc276f713 to your computer and use it in GitHub Desktop.
Save tebriel/3bb69d64d9bfc276f713 to your computer and use it in GitHub Desktop.
input {
stdin {}
}
filter {
grok {
# Ex: I AM SOME DATA
match => ["message", "^%{DATA}$"]
}
if [data][info][score][value] {
}
}
output {
stdout { codec => rubydebug }
}
{
"message" => "I AM SOME DATA",
"@version" => "1",
"@timestamp" => "2014-12-27T00:55:11.075Z",
"host" => "Sauron",
"data" => {
"info" => {
"score" => {}
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment