API tools faq
paste
Advertisement
Guest User

logstash as root

a guest
Feb 28th, 2015
279
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 355.15 KB | None | 0 0
raw download clone embed print report
  1. :message=>"Reading config file", :file=>"logstash/agent.rb", :level=>:debug, :line=>"301"}
  2. :message=>"Compiled pipeline code:\n@inputs = []\n@filters = []\n@outputs = []\n@input_file_1 = plugin(\"input\", \"file\", LogStash::Util.hash_merge_many({ \"path\" => (\"/var/log/apache2/access.log\".force_encoding(\"UTF-8\")) }))\n\n@inputs << @input_file_1\n@filter_grok_2 = plugin(\"filter\", \"grok\", LogStash::Util.hash_merge_many({ \"match\" => {(\"message\".force_encoding(\"UTF-8\")) => (\"%{COMBINEDAPACHELOG}\".force_encoding(\"UTF-8\"))} }))\n\n@filters << @filter_grok_2\n@filter_date_3 = plugin(\"filter\", \"date\", LogStash::Util.hash_merge_many({ \"match\" => [(\"timestamp\".force_encoding(\"UTF-8\")), (\"dd/MMM/yyyy:HH:mm:ss Z\".force_encoding(\"UTF-8\"))] }))\n\n@filters << @filter_date_3\n@output_elasticsearch_4 = plugin(\"output\", \"elasticsearch\", LogStash::Util.hash_merge_many({ \"host\" => (\"localhost\".force_encoding(\"UTF-8\")) }))\n\n@outputs << @output_elasticsearch_4\n@output_stdout_5 = plugin(\"output\", \"stdout\", LogStash::Util.hash_merge_many({ \"codec\" => (\"rubydebug\".force_encoding(\"UTF-8\")) }))\n\n@outputs << @output_stdout_5\n @filter_func = lambda do |event, &block|\n extra_events = []\n @logger.debug? && @logger.debug(\"filter received\", :event => event.to_hash)\n newevents = []\n extra_events.each do |event|\n @filter_grok_2.filter(event) do |newevent|\n newevents << newevent\n end\n end\n extra_events += newevents\n @filter_grok_2.filter(event) do |newevent|\n extra_events << newevent\n end\n if event.cancelled?\n extra_events.each(&block)\n return\n end\n newevents = []\n extra_events.each do |event|\n @filter_date_3.filter(event) do |newevent|\n newevents << newevent\n end\n end\n extra_events += newevents\n @filter_date_3.filter(event) do |newevent|\n extra_events << newevent\n end\n if event.cancelled?\n extra_events.each(&block)\n return\n end\n \n extra_events.each(&block)\n end\n @output_func = lambda do |event, &block|\n @logger.debug? && @logger.debug(\"output received\", :event => event.to_hash)\n @output_elasticsearch_4.handle(event)\n @output_stdout_5.handle(event)\n \n end", :level=>:debug, :file=>"logstash/pipeline.rb", :line=>"26"}
  3. :message=>"Using milestone 2 input plugin 'file'. This plugin should be stable, but if you see strange behavior, please let us know! For more information on plugin milestones, see http://logstash.net/docs/1.4.2-modified/plugin-milestones", :level=>:warn, :file=>"logstash/config/mixin.rb", :line=>"209"}
  4. :message=>"config LogStash::Codecs::Plain/@charset = \"UTF-8\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  5. :message=>"config LogStash::Inputs::File/@path = [\"/var/log/apache2/access.log\"]", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  6. :message=>"config LogStash::Inputs::File/@debug = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  7. :message=>"config LogStash::Inputs::File/@codec = <LogStash::Codecs::Plain charset=>\"UTF-8\">", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  8. :message=>"config LogStash::Inputs::File/@add_field = {}", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  9. :message=>"config LogStash::Inputs::File/@stat_interval = 1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  10. :message=>"config LogStash::Inputs::File/@discover_interval = 15", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  11. :message=>"config LogStash::Inputs::File/@sincedb_write_interval = 15", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  12. :message=>"config LogStash::Inputs::File/@start_position = \"end\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  13. :message=>"config LogStash::Filters::Grok/@match = {\"message\"=>\"%{COMBINEDAPACHELOG}\"}", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  14. :message=>"config LogStash::Filters::Grok/@type = \"\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  15. :message=>"config LogStash::Filters::Grok/@tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  16. :message=>"config LogStash::Filters::Grok/@exclude_tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  17. :message=>"config LogStash::Filters::Grok/@add_tag = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  18. :message=>"config LogStash::Filters::Grok/@remove_tag = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  19. :message=>"config LogStash::Filters::Grok/@add_field = {}", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  20. :message=>"config LogStash::Filters::Grok/@remove_field = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  21. :message=>"config LogStash::Filters::Grok/@patterns_dir = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  22. :message=>"config LogStash::Filters::Grok/@drop_if_match = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  23. :message=>"config LogStash::Filters::Grok/@break_on_match = true", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  24. :message=>"config LogStash::Filters::Grok/@named_captures_only = true", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  25. :message=>"config LogStash::Filters::Grok/@keep_empty_captures = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  26. :message=>"config LogStash::Filters::Grok/@singles = true", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  27. :message=>"config LogStash::Filters::Grok/@tag_on_failure = [\"_grokparsefailure\"]", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  28. :message=>"config LogStash::Filters::Grok/@overwrite = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  29. :message=>"config LogStash::Filters::Date/@match = [\"timestamp\", \"dd/MMM/yyyy:HH:mm:ss Z\"]", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  30. :message=>"config LogStash::Filters::Date/@type = \"\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  31. :message=>"config LogStash::Filters::Date/@tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  32. :message=>"config LogStash::Filters::Date/@exclude_tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  33. :message=>"config LogStash::Filters::Date/@add_tag = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  34. :message=>"config LogStash::Filters::Date/@remove_tag = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  35. :message=>"config LogStash::Filters::Date/@add_field = {}", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  36. :message=>"config LogStash::Filters::Date/@remove_field = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  37. :message=>"config LogStash::Filters::Date/@target = \"@timestamp\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  38. :message=>"config LogStash::Codecs::Plain/@charset = \"UTF-8\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  39. :message=>"config LogStash::Outputs::ElasticSearch/@host = \"localhost\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  40. :message=>"config LogStash::Outputs::ElasticSearch/@type = \"\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  41. :message=>"config LogStash::Outputs::ElasticSearch/@tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  42. :message=>"config LogStash::Outputs::ElasticSearch/@exclude_tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  43. :message=>"config LogStash::Outputs::ElasticSearch/@codec = <LogStash::Codecs::Plain charset=>\"UTF-8\">", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  44. :message=>"config LogStash::Outputs::ElasticSearch/@workers = 1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  45. :message=>"config LogStash::Outputs::ElasticSearch/@index = \"logstash-%{+YYYY.MM.dd}\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  46. :message=>"config LogStash::Outputs::ElasticSearch/@manage_template = true", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  47. :message=>"config LogStash::Outputs::ElasticSearch/@template_name = \"logstash\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  48. :message=>"config LogStash::Outputs::ElasticSearch/@template_overwrite = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  49. :message=>"config LogStash::Outputs::ElasticSearch/@document_id = nil", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  50. :message=>"config LogStash::Outputs::ElasticSearch/@embedded = false", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  51. :message=>"config LogStash::Outputs::ElasticSearch/@embedded_http_port = \"9200-9300\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  52. :message=>"config LogStash::Outputs::ElasticSearch/@max_inflight_requests = 50", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  53. :message=>"config LogStash::Outputs::ElasticSearch/@flush_size = 5000", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  54. :message=>"config LogStash::Outputs::ElasticSearch/@idle_flush_time = 1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  55. :message=>"config LogStash::Outputs::ElasticSearch/@action = \"index\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  56. :message=>"config LogStash::Outputs::Stdout/@codec = <LogStash::Codecs::RubyDebug >", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  57. :message=>"config LogStash::Outputs::Stdout/@type = \"\"", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  58. :message=>"config LogStash::Outputs::Stdout/@tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  59. :message=>"config LogStash::Outputs::Stdout/@exclude_tags = []", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  60. :message=>"config LogStash::Outputs::Stdout/@workers = 1", :level=>:debug, :file=>"logstash/config/mixin.rb", :line=>"105"}
  61. :message=>"Registering file input", :path=>["/var/log/apache2/access.log"], :level=>:info, :file=>"logstash/inputs/file.rb", :line=>"74"}
  62. :message=>"No sincedb_path set, generating one based on the file path", :sincedb_path=>"/root/.sincedb_8636a19711465cc96926000984eb4005", :path=>["/var/log/apache2/access.log"], :level=>:info, :file=>"logstash/inputs/file.rb", :line=>"115"}
  63. :message=>"_sincedb_open: reading from /root/.sincedb_8636a19711465cc96926000984eb4005", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"199"}
  64. :message=>"_sincedb_open: setting [651972, 0, 64512] to 10352251", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"203"}
  65. :message=>"Grok patterns path", :patterns_dir=>["/opt/logstash/patterns/*"], :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"240"}
  66. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/mongodb", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  67. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/java", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  68. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/linux-syslog", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  69. :message=>"_discover_file_glob: /var/log/apache2/access.log: glob is: [\"/var/log/apache2/access.log\"]", :level=>:debug, :file=>"filewatch/watch.rb", :line=>"117"}
  70. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/redis", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  71. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/postgresql", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  72. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/nagios", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  73. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/mcollective-patterns", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  74. :message=>"_discover_file: /var/log/apache2/access.log: new: /var/log/apache2/access.log (exclude is [])", :level=>:debug, :file=>"filewatch/watch.rb", :line=>"126"}
  75. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/ruby", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  76. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/grok-patterns", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  77. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/haproxy", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  78. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/junos", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  79. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/mcollective", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  80. :message=>"_open_file: /var/log/apache2/access.log: opening", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"98"}
  81. :message=>"/var/log/apache2/access.log: sincedb last value 10352251, cur size 10355366", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"122"}
  82. :message=>"/var/log/apache2/access.log: sincedb: seeking to 10352251", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"124"}
  83. :message=>"Grok loading patterns from file", :path=>"/opt/logstash/patterns/firewalls", :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"247"}
  84. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  85. :message=>"Match data", :match=>{"message"=>"%{COMBINEDAPACHELOG}"}, :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"254"}
  86. :message=>"Grok compile", :field=>"message", :patterns=>["%{COMBINEDAPACHELOG}"], :level=>:info, :file=>"logstash/filters/grok.rb", :line=>"265"}
  87. :message=>"regexp: /message", :pattern=>"%{COMBINEDAPACHELOG}", :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"267"}
  88. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  89. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  90. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  91. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  92. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  93. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  94. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  95. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  96. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  97. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  98. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  99. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  100. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  101. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  102. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  103. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  104. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  105. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  106. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  107. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  108. :message=>"Adding type with date config", :type=>"", :field=>"timestamp", :format=>"dd/MMM/yyyy:HH:mm:ss Z", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"165"}
  109. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  110. :message=>"Running grok filter", :event=>#<LogStash::Event:0x2d9d4f83 @accessors=#<LogStash::Util::Accessors:0x32cf38da @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  111. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  112. :message=>"Pipeline started", :level=>:info, :file=>"logstash/pipeline.rb", :line=>"78"}
  113. :message=>"Event now: ", :event=>#<LogStash::Event:0x2d9d4f83 @accessors=#<LogStash::Util::Accessors:0x32cf38da @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.023Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  114. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  115. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  116. :message=>"Date parsing done", :value=>"28/Feb/2015:14:37:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  117. :message=>"filter received", :event=>{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  118. :message=>"Running grok filter", :event=>#<LogStash::Event:0x43ba7ab0 @accessors=#<LogStash::Util::Accessors:0x7ccdb8d @store={"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  119. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  120. :message=>"Event now: ", :event=>#<LogStash::Event:0x43ba7ab0 @accessors=#<LogStash::Util::Accessors:0x7ccdb8d @store={"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, @lut={"host"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "host"], "path"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "path"], "message"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "message"], "clientip"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "clientip"], "ident"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "ident"], "auth"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "auth"], "timestamp"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "timestamp"], "verb"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "verb"], "request"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "request"], "httpversion"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "httpversion"], "response"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "response"], "bytes"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "bytes"], "referrer"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "referrer"], "agent"=>[{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, "agent"]}>, @data={"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.025Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  121. :message=>"log4j java properties setup", :log4j_level=>"DEBUG", :level=>:debug, :file=>"logstash/logging.rb", :line=>"87"}
  122. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  123. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  124. :message=>"Date parsing done", :value=>"28/Feb/2015:14:39:01 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  125. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  126. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  127. :message=>"Running grok filter", :event=>#<LogStash::Event:0x73866914 @accessors=#<LogStash::Util::Accessors:0x7d5cdb4c @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  128. :message=>"Event now: ", :event=>#<LogStash::Event:0x73866914 @accessors=#<LogStash::Util::Accessors:0x7d5cdb4c @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.026Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  129. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  130. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  131. :message=>"Date parsing done", :value=>"28/Feb/2015:14:42:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  132. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  133. :message=>"Running grok filter", :event=>#<LogStash::Event:0xe92e4ac @accessors=#<LogStash::Util::Accessors:0x4de2dfad @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  134. :message=>"Event now: ", :event=>#<LogStash::Event:0xe92e4ac @accessors=#<LogStash::Util::Accessors:0x4de2dfad @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.040Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  135. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  136. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  137. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  138. :message=>"Date parsing done", :value=>"28/Feb/2015:14:47:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  139. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  140. :message=>"Running grok filter", :event=>#<LogStash::Event:0x515b0e63 @accessors=#<LogStash::Util::Accessors:0x310daf4f @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  141. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  142. :message=>"Event now: ", :event=>#<LogStash::Event:0x515b0e63 @accessors=#<LogStash::Util::Accessors:0x310daf4f @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.041Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  143. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  144. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  145. :message=>"Date parsing done", :value=>"28/Feb/2015:14:52:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  146. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  147. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  148. :message=>"Running grok filter", :event=>#<LogStash::Event:0x51eb323 @accessors=#<LogStash::Util::Accessors:0x2282c175 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  149. :message=>"Event now: ", :event=>#<LogStash::Event:0x51eb323 @accessors=#<LogStash::Util::Accessors:0x2282c175 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.055Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  150. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  151. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  152. :message=>"Date parsing done", :value=>"28/Feb/2015:14:57:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  153. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  154. :message=>"Running grok filter", :event=>#<LogStash::Event:0x7270f34a @accessors=#<LogStash::Util::Accessors:0x5574b9f8 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  155. :message=>"Received line", :path=>"/var/log/apache2/access.log", :text=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", :level=>:debug, :file=>"logstash/inputs/file.rb", :line=>"134"}
  156. :message=>"Event now: ", :event=>#<LogStash::Event:0x7270f34a @accessors=#<LogStash::Util::Accessors:0x5574b9f8 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.061Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  157. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  158. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  159. :message=>"Date parsing done", :value=>"28/Feb/2015:15:02:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  160. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  161. :message=>"Running grok filter", :event=>#<LogStash::Event:0x1dc12709 @accessors=#<LogStash::Util::Accessors:0x73e9cf21 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  162. :message=>"writing sincedb (delta since last write = 1425131430)", :level=>:debug, :file=>"filewatch/tail.rb", :line=>"177"}
  163. :message=>"/var/log/apache2/access.log: file grew, old size 0, new size 10355366", :level=>:debug, :file=>"filewatch/watch.rb", :line=>"81"}
  164. :message=>"Event now: ", :event=>#<LogStash::Event:0x1dc12709 @accessors=#<LogStash::Util::Accessors:0x73e9cf21 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.075Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  165. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  166. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  167. :message=>"Date parsing done", :value=>"28/Feb/2015:15:07:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  168. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  169. :message=>"Running grok filter", :event=>#<LogStash::Event:0x256f78ad @accessors=#<LogStash::Util::Accessors:0x395bb90e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  170. :message=>"Event now: ", :event=>#<LogStash::Event:0x256f78ad @accessors=#<LogStash::Util::Accessors:0x395bb90e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.076Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  171. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  172. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  173. :message=>"Date parsing done", :value=>"28/Feb/2015:15:12:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  174. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  175. :message=>"Running grok filter", :event=>#<LogStash::Event:0x53fa6912 @accessors=#<LogStash::Util::Accessors:0x5d0847d0 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  176. :message=>"Event now: ", :event=>#<LogStash::Event:0x53fa6912 @accessors=#<LogStash::Util::Accessors:0x5d0847d0 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.078Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}log4j, [2015-02-28T16:50:31.154] INFO: org.elasticsearch.node: [logstash-linux01-6375-4012] version[1.1.1], pid[6375], build[f1585f0/2014-04-16T14:27:12Z]
  177. org.elasticsearch.node: [logstash-linux01-6375-4012] initializing ...
  178. org.elasticsearch.node: [logstash-linux01-6375-4012] using home [/var/lib/logstash], config [/var/lib/logstash/config], data [[/var/lib/logstash/data]], logs [/var/lib/logstash/logs], work [/var/lib/logstash/work], plugins [/var/lib/logstash/plugins]
  179.  
  180. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  181. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  182. :message=>"Date parsing done", :value=>"28/Feb/2015:15:17:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  183. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  184. :message=>"Running grok filter", :event=>#<LogStash::Event:0x55b0f93c @accessors=#<LogStash::Util::Accessors:0x55bafe17 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  185. :message=>"Event now: ", :event=>#<LogStash::Event:0x55b0f93c @accessors=#<LogStash::Util::Accessors:0x55bafe17 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.092Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}log4j, [2015-02-28T16:50:31.192] DEBUG: org.elasticsearch.plugins: [logstash-linux01-6375-4012] [/var/lib/logstash/plugins] directory does not exist.
  186. org.elasticsearch.plugins: [logstash-linux01-6375-4012] loaded [], sites []
  187.  
  188. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  189. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  190. :message=>"Date parsing done", :value=>"28/Feb/2015:15:22:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  191. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  192. :message=>"Running grok filter", :event=>#<LogStash::Event:0x79a7daee @accessors=#<LogStash::Util::Accessors:0x7b167da7 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  193. :message=>"Event now: ", :event=>#<LogStash::Event:0x79a7daee @accessors=#<LogStash::Util::Accessors:0x7b167da7 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.093Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}log4j, [2015-02-28T16:50:31.228] DEBUG: org.elasticsearch.common.compress.lzf: using [UnsafeChunkDecoder] decoder
  194.  
  195. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  196. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  197. :message=>"Date parsing done", :value=>"28/Feb/2015:15:27:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  198. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  199. :message=>"Running grok filter", :event=>#<LogStash::Event:0x404043cb @accessors=#<LogStash::Util::Accessors:0x3b22e561 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  200. :message=>"Event now: ", :event=>#<LogStash::Event:0x404043cb @accessors=#<LogStash::Util::Accessors:0x3b22e561 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.108Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  201. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  202. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  203. :message=>"Date parsing done", :value=>"28/Feb/2015:15:32:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  204. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  205. :message=>"Running grok filter", :event=>#<LogStash::Event:0x12ca0145 @accessors=#<LogStash::Util::Accessors:0xc1962a6 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  206. :message=>"Event now: ", :event=>#<LogStash::Event:0x12ca0145 @accessors=#<LogStash::Util::Accessors:0xc1962a6 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.109Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  207. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  208. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  209. :message=>"Date parsing done", :value=>"28/Feb/2015:15:37:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  210. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  211. :message=>"Running grok filter", :event=>#<LogStash::Event:0x21c43d4b @accessors=#<LogStash::Util::Accessors:0x5a94183e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  212. :message=>"Event now: ", :event=>#<LogStash::Event:0x21c43d4b @accessors=#<LogStash::Util::Accessors:0x5a94183e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.123Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  213. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  214. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  215. :message=>"Date parsing done", :value=>"28/Feb/2015:15:42:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  216. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  217. :message=>"Running grok filter", :event=>#<LogStash::Event:0x12cb4632 @accessors=#<LogStash::Util::Accessors:0x5f6d8641 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  218. :message=>"Event now: ", :event=>#<LogStash::Event:0x12cb4632 @accessors=#<LogStash::Util::Accessors:0x5f6d8641 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.124Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  219. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  220. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  221. :message=>"Date parsing done", :value=>"28/Feb/2015:15:47:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  222. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  223. :message=>"Running grok filter", :event=>#<LogStash::Event:0x73a20aab @accessors=#<LogStash::Util::Accessors:0x136a9bdc @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  224. :message=>"Event now: ", :event=>#<LogStash::Event:0x73a20aab @accessors=#<LogStash::Util::Accessors:0x136a9bdc @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.126Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  225. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  226. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  227. :message=>"Date parsing done", :value=>"28/Feb/2015:15:52:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  228. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  229. :message=>"Running grok filter", :event=>#<LogStash::Event:0x166c2b98 @accessors=#<LogStash::Util::Accessors:0x17a213a8 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  230. :message=>"Event now: ", :event=>#<LogStash::Event:0x166c2b98 @accessors=#<LogStash::Util::Accessors:0x17a213a8 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.136Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  231. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  232. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  233. :message=>"Date parsing done", :value=>"28/Feb/2015:15:57:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  234. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  235. :message=>"Running grok filter", :event=>#<LogStash::Event:0x7d2f893d @accessors=#<LogStash::Util::Accessors:0x3bdb4400 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  236. :message=>"Event now: ", :event=>#<LogStash::Event:0x7d2f893d @accessors=#<LogStash::Util::Accessors:0x3bdb4400 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.144Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  237. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  238. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  239. :message=>"Date parsing done", :value=>"28/Feb/2015:16:02:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  240. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  241. :message=>"Running grok filter", :event=>#<LogStash::Event:0x4848433c @accessors=#<LogStash::Util::Accessors:0x363d37 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  242. :message=>"Event now: ", :event=>#<LogStash::Event:0x4848433c @accessors=#<LogStash::Util::Accessors:0x363d37 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.146Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  243. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  244. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  245. :message=>"Date parsing done", :value=>"28/Feb/2015:16:07:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  246. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  247. :message=>"Running grok filter", :event=>#<LogStash::Event:0x13105282 @accessors=#<LogStash::Util::Accessors:0x1498de95 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  248. :message=>"Event now: ", :event=>#<LogStash::Event:0x13105282 @accessors=#<LogStash::Util::Accessors:0x1498de95 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.160Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}log4j, [2015-02-28T16:50:33.080] DEBUG: org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [generic], type [cached], keep_alive [30s]
  249. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [index], type [fixed], size [1], queue_size [200]
  250. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [bulk], type [fixed], size [1], queue_size [50]
  251. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [get], type [fixed], size [1], queue_size [1k]
  252. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [search], type [fixed], size [3], queue_size [1k]
  253. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [suggest], type [fixed], size [1], queue_size [1k]
  254. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [percolate], type [fixed], size [1], queue_size [1k]
  255. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [management], type [scaling], min [1], size [5], keep_alive [5m]
  256. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [flush], type [scaling], min [1], size [1], keep_alive [5m]
  257. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [merge], type [scaling], min [1], size [1], keep_alive [5m]
  258. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [refresh], type [scaling], min [1], size [1], keep_alive [5m]
  259. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [warmer], type [scaling], min [1], size [1], keep_alive [5m]
  260. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [snapshot], type [scaling], min [1], size [1], keep_alive [5m]
  261. org.elasticsearch.threadpool: [logstash-linux01-6375-4012] creating thread_pool [optimize], type [fixed], size [1], queue_size [null]
  262. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] using worker_count[2], port[9300-9400], bind_host[null], publish_host[null], compress[false], connect_timeout[30s], connections_per_node[2/3/6/1/1], receive_predictor[512kb->512kb]
  263. org.elasticsearch.discovery.zen.ping.unicast: [logstash-linux01-6375-4012] using initial hosts [localhost:9300, localhost:9301, localhost:9302, localhost:9303, localhost:9304, localhost:9305], with concurrent_connects [10]
  264. org.elasticsearch.discovery.zen: [logstash-linux01-6375-4012] using ping.timeout [3s], master_election.filter_client [true], master_election.filter_data [false]
  265. org.elasticsearch.discovery.zen.elect: [logstash-linux01-6375-4012] using minimum_master_nodes [-1]
  266. org.elasticsearch.discovery.zen.fd: [logstash-linux01-6375-4012] [master] uses ping_interval [1s], ping_timeout [30s], ping_retries [3]
  267. org.elasticsearch.discovery.zen.fd: [logstash-linux01-6375-4012] [node ] uses ping_interval [1s], ping_timeout [30s], ping_retries [3]
  268. org.elasticsearch.monitor.jvm: [logstash-linux01-6375-4012] enabled [true], last_gc_enabled [false], interval [1s], gc_threshold [{old=GcThreshold{name='old', warnThreshold=10000, infoThreshold=5000, debugThreshold=2000}, default=GcThreshold{name='default', warnThreshold=10000, infoThreshold=5000, debugThreshold=2000}, young=GcThreshold{name='young', warnThreshold=1000, infoThreshold=700, debugThreshold=400}}]
  269. org.elasticsearch.monitor.os: [logstash-linux01-6375-4012] Using probe [org.elasticsearch.monitor.os.JmxOsProbe@73ebe6d0] with refresh_interval [1s]
  270. org.elasticsearch.monitor.process: [logstash-linux01-6375-4012] Using probe [org.elasticsearch.monitor.process.JmxProcessProbe@32fe2461] with refresh_interval [1s]
  271. org.elasticsearch.monitor.jvm: [logstash-linux01-6375-4012] Using refresh_interval [1s]
  272. org.elasticsearch.monitor.network: [logstash-linux01-6375-4012] Using probe [org.elasticsearch.monitor.network.JmxNetworkProbe@13aa4b5a] with refresh_interval [5s]
  273. org.elasticsearch.monitor.network: [logstash-linux01-6375-4012] net_info
  274. host [linux01]
  275. eth0 display_name [eth0]
  276. address [/fe80:0:0:0:20c:29ff:fed0:5f66%2] [/192.168.8.19]
  277. mtu [1500] multicast [true] ptp [false] loopback [false] up [true] virtual [false]
  278. lo display_name [lo]
  279. address [/0:0:0:0:0:0:0:1%1] [/127.0.0.1]
  280. mtu [65536] multicast [false] ptp [false] loopback [true] up [true] virtual [false]
  281.  
  282. org.elasticsearch.monitor.fs: [logstash-linux01-6375-4012] Using probe [org.elasticsearch.monitor.fs.JmxFsProbe@489c958] with refresh_interval [1s]
  283. org.elasticsearch.indices.store: [logstash-linux01-6375-4012] using indices.store.throttle.type [MERGE], with index.store.throttle.max_bytes_per_sec [20mb]
  284. org.elasticsearch.script: [logstash-linux01-6375-4012] using script cache with max_size [500], expire [null]
  285. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using node_concurrent_recoveries [2], node_initial_primaries_recoveries [4]
  286. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster.routing.allocation.allow_rebalance] with [indices_all_active]
  287. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster_concurrent_rebalance] with [2]
  288. org.elasticsearch.gateway.local: [logstash-linux01-6375-4012] using initial_shards [quorum], list_timeout [30s]
  289. org.elasticsearch.indices.recovery: [logstash-linux01-6375-4012] using max_bytes_per_sec[20mb], concurrent_streams [3], file_chunk_size [512kb], translog_size [512kb], translog_ops [1000], and compress [true]
  290. org.elasticsearch.indices.memory: [logstash-linux01-6375-4012] using index_buffer_size [49.1mb], with min_shard_index_buffer_size [4mb], max_shard_index_buffer_size [512mb], shard_inactive_time [30m]
  291. org.elasticsearch.indices.cache.filter: [logstash-linux01-6375-4012] using [node] weighted filter cache with size [20%], actual_size [98.3mb], expire [null], clean_interval [1m]
  292. org.elasticsearch.indices.fielddata.cache: [logstash-linux01-6375-4012] using size [-1] [-1b], expire [null]
  293. org.elasticsearch.gateway.local.state.meta: [logstash-linux01-6375-4012] using gateway.local.auto_import_dangled [YES], with gateway.local.dangling_timeout [2h]
  294. org.elasticsearch.bulk.udp: [logstash-linux01-6375-4012] using enabled [false], host [null], port [9700-9800], bulk_actions [1000], bulk_size [5mb], flush_interval [5s], concurrent_requests [4]
  295. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using node_concurrent_recoveries [2], node_initial_primaries_recoveries [4]
  296. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster.routing.allocation.allow_rebalance] with [indices_all_active]
  297. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster_concurrent_rebalance] with [2]
  298. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using node_concurrent_recoveries [2], node_initial_primaries_recoveries [4]
  299. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster.routing.allocation.allow_rebalance] with [indices_all_active]
  300. org.elasticsearch.cluster.routing.allocation.decider: [logstash-linux01-6375-4012] using [cluster_concurrent_rebalance] with [2]
  301. org.elasticsearch.node: [logstash-linux01-6375-4012] initialized
  302. org.elasticsearch.node: [logstash-linux01-6375-4012] starting ...
  303. org.elasticsearch.netty.channel.socket.nio.SelectorUtil: Using select timeout of 500
  304. org.elasticsearch.netty.channel.socket.nio.SelectorUtil: Epoll-bug workaround enabled = false
  305. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] Bound to address [/0:0:0:0:0:0:0:0:9301]
  306. org.elasticsearch.transport: [logstash-linux01-6375-4012] bound_address {inet[/0:0:0:0:0:0:0:0:9301]}, publish_address {inet[/192.168.8.19:9301]}
  307. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] connected to node [[#zen_unicast_2#][linux01][inet[localhost/127.0.0.1:9301]]]
  308. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] connected to node [[#zen_unicast_1#][linux01][inet[localhost/127.0.0.1:9300]]]
  309. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] disconnected from [[#zen_unicast_1#][linux01][inet[localhost/127.0.0.1:9300]]]
  310. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] disconnected from [[#zen_unicast_2#][linux01][inet[localhost/127.0.0.1:9301]]]
  311. org.elasticsearch.discovery.zen: [logstash-linux01-6375-4012] filtered ping responses: (filter_client[true], filter_data[false])
  312. --> target [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]], master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]]
  313. org.elasticsearch.transport.netty: [logstash-linux01-6375-4012] connected to node [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]]
  314. org.elasticsearch.discovery.zen.publish: [logstash-linux01-6375-4012] received cluster state version 175
  315. org.elasticsearch.discovery.zen: [logstash-linux01-6375-4012] received cluster state from [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]] which is also master but with cluster name [Cluster [elasticsearch]]
  316. org.elasticsearch.discovery.zen: [logstash-linux01-6375-4012] got a new state from master node, though we are already trying to rejoin the cluster
  317. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] processing [zen-disco-receive(from master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]])]: execute
  318. org.elasticsearch.discovery.zen.fd: [logstash-linux01-6375-4012] [master] restarting fault detection against master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]], reason [new cluster state received and we are monitoring the wrong master [null]]
  319. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] got first state from fresh master [g_MjDNTAQW-uuTX3UnPf2g]
  320. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] cluster state updated, version [175], source [zen-disco-receive(from master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]])]
  321. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] detected_master [Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]], added {[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]],}, reason: zen-disco-receive(from master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]])
  322. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] set local cluster state to version 175
  323. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] processing [zen-disco-receive(from master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]])]: done applying updated cluster_state (version: 175)
  324. org.elasticsearch.discovery: [logstash-linux01-6375-4012] elasticsearch/mnPGLPXQRKCUkGneFL_4hQ
  325. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] processing [updating local node id]: execute
  326. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] cluster state updated, version [175], source [updating local node id]
  327. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] set local cluster state to version 175
  328. org.elasticsearch.cluster.service: [logstash-linux01-6375-4012] processing [updating local node id]: done applying updated cluster_state (version: 175)
  329. org.elasticsearch.node: [logstash-linux01-6375-4012] started
  330. org.elasticsearch.discovery.zen.fd: [logstash-linux01-6375-4012] [master] starting fault detection against master [[Graydon Creed][g_MjDNTAQW-uuTX3UnPf2g][linux01][inet[/192.168.8.19:9300]]], reason [initial_join]
  331.  
  332. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  333. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  334. :message=>"Date parsing done", :value=>"28/Feb/2015:16:12:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  335. :message=>"New Elasticsearch output", :cluster=>nil, :host=>"localhost", :port=>"9300-9305", :embedded=>false, :protocol=>"node", :level=>:info, :file=>"logstash/outputs/elasticsearch.rb", :line=>"252"}
  336. :message=>"Automatic template management enabled", :manage_template=>"true", :level=>:info, :file=>"logstash/outputs/elasticsearch.rb", :line=>"258"}
  337. :message=>"Using mapping template", :template=>"{ \"template\" : \"logstash-*\", \"settings\" : { \"index.refresh_interval\" : \"5s\" }, \"mappings\" : { \"_default_\" : { \"_all\" : {\"enabled\" : true}, \"dynamic_templates\" : [ { \"string_fields\" : { \"match\" : \"*\", \"match_mapping_type\" : \"string\", \"mapping\" : { \"type\" : \"string\", \"index\" : \"analyzed\", \"omit_norms\" : true, \"fields\" : { \"raw\" : {\"type\": \"string\", \"index\" : \"not_analyzed\", \"ignore_above\" : 256} } } } } ], \"properties\" : { \"@version\": { \"type\": \"string\", \"index\": \"not_analyzed\" }, \"geoip\" : { \"type\" : \"object\", \"dynamic\": true, \"path\": \"full\", \"properties\" : { \"location\" : { \"type\" : \"geo_point\" } } } } } }}", :level=>:info, :file=>"logstash/outputs/elasticsearch.rb", :line=>"278"}
  338. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  339. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  340. :message=>"Running grok filter", :event=>#<LogStash::Event:0x4fb78b02 @accessors=#<LogStash::Util::Accessors:0x1b075931 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  341. :message=>"Event now: ", :event=>#<LogStash::Event:0x4fb78b02 @accessors=#<LogStash::Util::Accessors:0x1b075931 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.323Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  342. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  343. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  344. :message=>"Date parsing done", :value=>"28/Feb/2015:16:17:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  345. :message=>"output received", :event=>{"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:39:01.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  346. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  347. :message=>"Running grok filter", :event=>#<LogStash::Event:0x58a61471 @accessors=#<LogStash::Util::Accessors:0x7f88342e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  348. :message=>"Event now: ", :event=>#<LogStash::Event:0x58a61471 @accessors=#<LogStash::Util::Accessors:0x7f88342e @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.514Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  349. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  350. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  351. :message=>"Date parsing done", :value=>"28/Feb/2015:16:22:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  352. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  353. :message=>"Running grok filter", :event=>#<LogStash::Event:0x78850495 @accessors=#<LogStash::Util::Accessors:0x64f01003 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  354. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  355. :message=>"Event now: ", :event=>#<LogStash::Event:0x78850495 @accessors=#<LogStash::Util::Accessors:0x64f01003 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.581Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  356. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  357. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  358. :message=>"Date parsing done", :value=>"28/Feb/2015:16:27:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  359. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  360. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  361. :message=>"Running grok filter", :event=>#<LogStash::Event:0x5c62592d @accessors=#<LogStash::Util::Accessors:0x3cccc8bd @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  362. :message=>"Event now: ", :event=>#<LogStash::Event:0x5c62592d @accessors=#<LogStash::Util::Accessors:0x3cccc8bd @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.726Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  363. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  364. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:52:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  365. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  366. :message=>"Date parsing done", :value=>"28/Feb/2015:16:32:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  367. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  368. :message=>"Running grok filter", :event=>#<LogStash::Event:0x7872ffb7 @accessors=#<LogStash::Util::Accessors:0x45f28528 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  369. :message=>"Event now: ", :event=>#<LogStash::Event:0x7872ffb7 @accessors=#<LogStash::Util::Accessors:0x45f28528 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.759Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  370. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:57:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  371. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  372. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  373. :message=>"Date parsing done", :value=>"28/Feb/2015:16:37:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  374. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  375. :message=>"Running grok filter", :event=>#<LogStash::Event:0x344b915d @accessors=#<LogStash::Util::Accessors:0x4d348b7d @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  376. :message=>"Event now: ", :event=>#<LogStash::Event:0x344b915d @accessors=#<LogStash::Util::Accessors:0x4d348b7d @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.847Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  377. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  378. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  379. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:02:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  380. :message=>"Date parsing done", :value=>"28/Feb/2015:16:42:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  381. :message=>"filter received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, :level=>:debug, :file=>"(eval)", :line=>"21"}
  382. :message=>"Running grok filter", :event=>#<LogStash::Event:0x7e7aeea6 @accessors=#<LogStash::Util::Accessors:0x38ca1529 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, "path"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log"}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"280"}
  383. :message=>"Event now: ", :event=>#<LogStash::Event:0x7e7aeea6 @accessors=#<LogStash::Util::Accessors:0x38ca1529 @store={"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @lut={"host"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "host"], "path"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "path"], "message"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "message"], "clientip"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "clientip"], "ident"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "ident"], "auth"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "auth"], "timestamp"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "timestamp"], "verb"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "verb"], "request"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "request"], "httpversion"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "httpversion"], "response"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "response"], "bytes"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "bytes"], "referrer"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "referrer"], "agent"=>[{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, "agent"]}>, @data={"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:50:30.912Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, @cancelled=false>, :level=>:debug, :file=>"logstash/filters/grok.rb", :line=>"300"}
  384. :message=>"Date filter: received event", :type=>nil, :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"178"}
  385. :message=>"Date filter looking for field", :type=>nil, :field=>"timestamp", :level=>:debug, :file=>"logstash/filters/date.rb", :line=>"181"}
  386. :message=>"Date parsing done", :value=>"28/Feb/2015:16:47:13 +:level=>:debug, :file=>"logstash/filters/date.rb", :line=>"210"}
  387. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:07:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  388. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:12:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  389. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:17:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  390. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:22:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  391. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:27:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  392. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:32:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  393. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  394. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  395. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  396. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:52:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  397. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:57:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  398. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:02:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  399. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:07:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  400. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:12:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  401. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:17:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  402. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:22:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  403. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:27:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  404. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:32:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  405. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  406. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  407. :message=>"output received", :event=>{"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}, :level=>:debug, :file=>"(eval)", :line=>"54"}
  408. :message=>"Flushing output", :outgoing_count=>28, :time_since_last_flush=>1.0, :outgoing_events=>{nil=>[["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:14:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"74.192.37.197 - - [28/Feb/2015:14:39:01 +0300] \"GET /tmUnblock.cgi HTTP/1.1\" 400 0 \"-\" \"-\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:39:01.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"74.192.37.197", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:39:01 +"verb"=>"GET", "request"=>"/tmUnblock.cgi", "httpversion"=>"1.1", "response"=>"400", "bytes"=>"0", "referrer"=>"\"-\"", "agent"=>"\"-\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:14:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:14:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:14:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:52:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:14:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T11:57:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:14:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:02:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:07:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:12:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:17:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:22:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:27:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:32:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:52:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:52:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:52:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:15:57:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T12:57:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:15:57:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:02:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:02:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:02:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:07:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:07:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:07:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:12:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:12:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:12:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:17:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:17:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:17:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:22:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:22:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:22:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:27:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:27:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:27:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:32:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:32:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:32:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:37:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:37:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:37:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:42:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:42:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:42:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}], ["index", {:_id=>nil, :_index=>"logstash-2015.02.28", :_type=>"logs"}, {"message"=>"127.0.0.1 - - [28/Feb/2015:16:47:13 +0300] \"GET / HTTP/1.1\" 200 2344 \"-\" \"check_http/v1.5 (nagios-plugins 1.5)\"", "@version"=>"1", "@timestamp"=>"2015-02-28T13:47:13.000Z", "host"=>"linux01", "path"=>"/var/log/apache2/access.log", "clientip"=>"127.0.0.1", "ident"=>"-", "auth"=>"-", "timestamp"=>"28/Feb/2015:16:47:13 +"verb"=>"GET", "request"=>"/", "httpversion"=>"1.1", "response"=>"200", "bytes"=>"2344", "referrer"=>"\"-\"", "agent"=>"\"check_http/v1.5 (nagios-plugins 1.5)\""}]]}, :batch_timeout=>1, :force=>true, :final=>nil, :level=>:debug, :file=>"stud/buffer.rb", :line=>"207"}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!