We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent e0e8cf5 commit bc64147Copy full SHA for bc64147
ALTERNATIVE-INPUTS.md
@@ -7,9 +7,11 @@ Various other Logstash filters can produce the needed input fields (`program` an
7
----------------
8
9
```
10
-grok {
11
- match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST} %{DATA:program}(?:\[%{POSINT}\])?: %{GREEDYDATA:message}" }
12
- overwrite => ["timestamp", "message"]
+filter {
+ grok {
+ match => { "message" => "%{SYSLOGTIMESTAMP:timestamp} %{SYSLOGHOST} %{DATA:program}(?:\[%{POSINT}\])?: %{GREEDYDATA:message}" }
13
+ overwrite => ["timestamp", "message"]
14
+ }
15
}
16
17
0 commit comments