GROK filter in Logstash
- This a powerful & mostly used tool for parsing unstructured data into structured
- For the sample log data Refer Here
- For logstash patterns Refer Here
- For Grok Debugger Refer Here
- Exercise 1: Write a grok pattern to parse the complete andriod logs
- Exercise 2: Write a grok pattern to parse the complete apache logs
- Exercise 3: Write a grok pattern to parse the complete linux logs
- Approach:
- Start writing grok pattern with GREEDYDATA (it means all the remaining data)
- Exercise: Try parsing all the possible log formats
