You'll get a much better response on the Logstash list :) See https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users
On 16 March 2015 at 12:26, Taylor Wood <[email protected]> wrote: > We are using logstash-forwarder to forward syslog information to a remote > server running logstash. We would like for logstash to output the events > from the remote servers into in plain format. The problem we have is that > logstash outputs an event to the file like this: > > {"message":"Mar 11 10:51:52 stage tayler: test", "@version":"1", > "@timestamp":"2015-03-11T16:51:55.612Z", "file":"/var/log/messages", > "host":"SERVERHOST", "offset":"6398", "type":"messages”} > > What we want each event to look like is this: > > Mar 11 10:51:52 stage user: test > > Is it possible to either tell logstash to output events as plain format > into a file or to tell the remote logstash-forwarder instances to output > events as plain format to a remote server’s file? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/b75c25c5-abba-4ae6-a371-61724c7372bb%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X8dxY5%2BOJGMg1VjWFa2CYy8Qug8NHErgmqrp-QTNYGK7Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
