Logstash contd
- Lets expand on filters
- logstash filter plugins Refer Here
- Grok patterns Refer Here
- Using grok for nginx access logs
%{IP:client_ip} %{USER:ident} %{USER:auth} \[%{HTTPDATE:apache_timestamp}\] \"%{WORD:method} /%{NOTSPACE:request_page} HTTP/%{NUMBER:http_version}\" %{NUMBER:server_response}
- Exercise: Try finding a grok pattern for jenkins logs
