logstash config

2015-03-05 Thread David J. Palaitis
Anyone out there have a logstash config for Mesos log format they'd like to share? I'm finding the date format stubbornly difficult to map to timestamp.

Re: logstash config

2015-03-05 Thread Gurvinder Singh
This is the config we use for mesos logs MESOSTIMESTAMP %{MONTHNUM}%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND} MESOSLOG %{DATA:loglevel}%{MESOSTIMESTAMP:timestamp}\s+%{POSINT:pid}\s+%{NOTSPACE:class}: in logstash config if [type] == mesos { grok { patterns_dir = [path to your patterns