search for: filebeat

...putting redis between the clients and ELK - that works in my test setup from a Fedora box. My problem though is ingesting the logs from my CentOS servers. By far the easiest thing is to get rsyslog to send things directly to redis, but that needs the omhiredis plugin. The second choice is to use filebeat to scan the log files - but if I want to have things like facility and severity logged, I have to use custom rsyslog templates and it's a pain trying to get filebeat to parse them (and the filebeat redis output seems a bit flaky as well). I can see that syslog-ng has redis support, but I would...

I asked a similar question about a year ago and didn't get any answers. So I thought I'd try again. What do people do to get their syslog messages on CentOS 7 into a remote ELK stack. I've tried lots of things involving rsyslog, filebeat, redis, logstash and so on in lots of different configurations but nothing really works. I can get rsyslog to talk directly to logstash (acting as a syslog server) but the messages don't have facility or severity codes in them which makes it considerably more difficult to manage the messages....

...erisk/blob/master/configs/samples/pjproject.conf.sample by few examples try to explain  what usefull info i can get set [startup] log_level=6 type=startup and dig what's usefull is not very productive btw we are using tools like sipcapture.org,voipmonitor.org, callstats.io, elasticsearch+filebeat, ... but without informations whats happening inside asterisk is harder to solve problems Dne 12/12/2019 v 16:00 Joshua C. Colp napsal(a): > On Thu, Dec 12, 2019 at 10:57 AM marek <cervajs64 at gmail.com > <mailto:cervajs64 at gmail.com>> wrote: > > thank you very mu...

...to say I didn't know but decided to look again and I found this article https://devconnected.com/monitoring-linux-logs-with-kibana-and-rsyslog/ > What do people do to get their syslog messages on CentOS 7 into a > remote ELK stack. I've tried lots of things involving rsyslog, > filebeat, redis, logstash and so on in lots of different configurations > but nothing really works. > > I can get rsyslog to talk directly to logstash (acting as a syslog > server) but the messages don't have facility or severity codes in them > which makes it considerably more difficult...

...at biggs.org.uk> wrote: > I asked a similar question about a year ago and didn't get any answers. > So I thought I'd try again. > > What do people do to get their syslog messages on CentOS 7 into a > remote ELK stack. I've tried lots of things involving rsyslog, > filebeat, redis, logstash and so on in lots of different configurations > but nothing really works. > > I can get rsyslog to talk directly to logstash (acting as a syslog > server) but the messages don't have facility or severity codes in them > which makes it considerably more difficult...

Hallo, I try to send my centos 7 logfiles to an logstsah server. Can anyone give me an hint how to fix this problem? Thanks Ralf > {"index"=>{"_index"=>"%{[@metadata][comline]}-%{[@metadata][version]}", > "_type"=>"doc", "_id"=>"U1XLXGkBpfl5FoHeY4J8", "status"=>400, >

Hi, Is there a way to drop the ANSI colour strings from log files? In particular, I've got JSON logging throwing logs over to ES, but they have the ANSI colour escape sequences. Ideally I don't want to lose coloured logs from the console though, and I can't "see" a way to do this. Ast 16 at the moment… Andrew -------------- next part -------------- An HTML attachment was

thank you very much. this is exactly whats needed for debug example output for your info [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .Added new remote candidate from the request: 2.2.2.2:57536 [Dec 12 15:39:19] DEBUG[2182][C-00000000]: pjproject: <?>:         icess0x7f5d44081e88 .New triggered check added: 1 [Dec 12 15:39:19]