Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #input {
- #
- #file {
- # codec => multiline {
- #pattern => "(\{[^}\[^}]*\})"
- #pattern => "\{[^}][^}]*\}"
- #pattern => "^{"
- # negate => true
- # what => previous
- # max_lines => 100000
- # }
- # path=> "/opt/logstash/output.json"
- # start_position => "beginning"
- # sincedb_path => "/dev/null"
- #}
- #
- #}
- #filter {
- #
- #grok {
- # match => [ "message","%{TIMESTAMP_ISO8601:exclude}%{GREEDYDATA:exclude1}(?[\s])(?<json_value>#[\W\w]+)"]
- #}
- #}
- #filter {
- #
- # mutate {
- # gsub => [
- # "message", "{[^}[^}]*}", "\1",
- # ]
- #}
- #
- #}
- #filter {
- # grok {
- # match => { "message" => "(\{[^}\[^}]*\})" }
- # overwrite => [ "message" ]
- # }
- #}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement