We are using logstash-forwarder to forward syslog information to a remote
server running logstash. We would like for logstash to output the events
from the remote servers into in plain format. The problem we have is that
logstash outputs an event to the file like this:
{"message":"Mar 11 10:51:52 stage tayler: test", "@version":"1",
"@timestamp":"2015-03-11T16:51:55.612Z", "file":"/var/log/messages",
"host":"SERVERHOST", "offset":"6398", "type":"messages”}
What we want each event to look like is this:
Mar 11 10:51:52 stage user: test
Is it possible to either tell logstash to output events as plain format
into a file or to tell the remote logstash-forwarder instances to output
events as plain format to a remote server’s file?
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
