ИЛ
Не понятно как его прикручивать к своему парсеру
input {
beats {
port => 5044
type => "beats"
}
}
filter {
if [source] == "/opt/server.log" {
grok {
patterns_dir => ["/opt/ELK/logstash-5.6.9/config/pattern/"]
match => { "message" => "\[%{TIMESTAMP_ISO8601:TimeStamp}\]\[%{LOGLEVEL1:LogLevel}\]\[%{JAVALOGMESSAGE:JavaClas\] %{ALL:Message}" }
}
input {
beats {
port => 5044
type => "beats"
}
}
filter {
if [source] == "/opt/server.log" {
grok {
patterns_dir => ["/opt/ELK/logstash-5.6.9/config/pattern/"]
match => { "message" => "\[%{TIMESTAMP_ISO8601:TimeStamp}\]\[%{LOGLEVEL1:LogLevel}\]\[%{JAVALOGMESSAGE:JavaClas\] %{ALL:Message}" }
}