similar to: Disamiguate Profiles::Logstash and Logstash

Hello dovecot-users, I am currently playing with Elastics ELK stack and was kind of surprised to NOT yet find a good set of GROK or KV pattern to parse dovecots lush and information rich logs. The last post regarding this endeavor was in 2014 (http://www.dovecot.org/list/dovecot/2014-June/096589.html), which "only" extracts the key->value pairs but not other parts of the log lines.

Guys, I need to parse my dovecot log files with logstash grok patterns. Is there any document specifying the patterns used by dovecot to write it's logs? I need to find all the log possibilities that could be writed to log files by dovecot. So, if a document like that exists or if anyone could answer my question, I'll could make the parser with less difficult. -- Att. Bruno

On Sun, 6 Mar 2016 04:34, Tim Dunphy <bluethundr at ...> wrote: > Hey guys, > > I'm trying to rotate a logstash log that can grow pretty large. 3.4GB last > I saw! > > And that's because the logrotate script I came up with didn't work. > > The error I get on a syntax check is this: > > #logrotate -f logstash > size: '100M': No such file

Hey guys, I'm trying to rotate a logstash log that can grow pretty large. 3.4GB last I saw! And that's because the logrotate script I came up with didn't work. The error I get on a syntax check is this: #logrotate -f logstash size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size:

Hallo, I try to send my centos 7 logfiles to an logstsah server. Can anyone give me an hint how to fix this problem? Thanks Ralf > {"index"=>{"_index"=>"%{[@metadata][comline]}-%{[@metadata][version]}", > "_type"=>"doc", "_id"=>"U1XLXGkBpfl5FoHeY4J8", "status"=>400, >

On Fri, 10 Jul 2020 at 16:33, Pete Biggs <pete at biggs.org.uk> wrote: > > I asked a similar question about a year ago and didn't get any answers. > So I thought I'd try again. > Honestly, as much as I have heard of people using Elastic Kibana.. they are usually using it for things already in JSON. WHen I looked in the past I either found someone wanting me to set up a

I asked a similar question about a year ago and didn't get any answers. So I thought I'd try again. What do people do to get their syslog messages on CentOS 7 into a remote ELK stack. I've tried lots of things involving rsyslog, filebeat, redis, logstash and so on in lots of different configurations but nothing really works. I can get rsyslog to talk directly to logstash (acting as

TL;DR: Is there a sensible way to get rsyslog to talk to redis on CentOS 7. The official way is to use the omhiredis plugin, but that doesn't seem to exist in the CentOS 7 repositories? (It's how I do it on my Fedora box.) The long version: I'm trying to rationalise logging and am using an ELK stack. When I've done this in the past it has suffered badly from congestion at peak

I don't use ELK at the moment, but is this helpful? % journalctl -f --output=json The above command prints the continuous output of the systemd journal in json format. Jason --------------------------------------------------------------------------- Jason Edgecombe | Linux Administrator UNC Charlotte | Office of OneIT 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone:

Hi All, here a few examples about how look ELK (ElasticSearch + Logstash + Kibana) stack with Icecast logs parsed. Last 7 days: http://bit.ly/1CHlhiS Last 30 days: http://bit.ly/1DgM5c2 If any be interested in try here is the Logstash config for parse the logs: http://bit.ly/1IbvYxI Some interesting filters that we use here, is remove any session lower of 60 seg, filter bots, monitoring

I wanted to let everyone know that the videos from PuppetConf are available at http://puppetlabs.com/community/videos/puppetconf/ Here are a few of my personal favorites: CERN: http://youtu.be/-Ykb2j2ojYU Discovering and creating great Puppet Modules: http://youtu.be/aWqktlD62ks (talk actually starts at 4:45 min into video) State of the Community http://youtu.be/0_u_5RkVymE (I''m

On Fri, 2020-07-10 at 16:44 -0400, Jason Edgecombe wrote: > I don't use ELK at the moment, but is this helpful? > > % journalctl -f --output=json > > The above command prints the continuous output of the systemd journal in > json format. > Thanks. The problem is getting that into logstash. But it's actually quite useful anyway as it's another method of

Guys, I'm getting a strange warning whenever I do a config test or a restart of nginx 1.0.15 [root at aoadbld00032lb nginx]# nginx -t nginx: [warn] conflicting server name "aoadbld00032lb.company.com" on 0.0.0.0:80, ignored nginx: [warn] conflicting server name "logs.pcf.company.com" on 0.0.0.0:80, ignored nginx: the configuration file /etc/nginx/nginx.conf syntax is ok

Hi, I was experimenting with Logstash + elasticsearch on FreeBSD 9 - initially I downloaded it by hand (I forgot to check for a port) and it worked fine. I then tried the port and this forced me to use a different java version (was jdk-16.0.3p4_25 now openjdk6-b27) and it seems that the new one causes a panic. Unfortunately crashdumps aren't working properly, however I did get the panic

puppet agent --verbose shows a verbose output of the changes done by puppet, such as: notice: /Stage[main]/Logstash::Config/Logstash::Configdir[agent]/File[/etc/logstash/agent/config]/owner: owner changed ''root'' to ''logstash'' notice: /Stage[main]/Varnish/Service[varnish]/ensure: ensure changed ''stopped'' to ''running''

hi, i have a pronlem connecting call from pstn with the following confuguration, please advice extensions.conf [from-trunk] include => from-pstn [from-pstn] include => from-pstn-custom include => ext-did include => from-pstn-timecheck exten => fax,1,Goto(ext-fax,in_fax,1) extensions_custom.conf [from-pstn-custom] exten => s,1,Answer exten =>

Hello list. I''ve the following parent class: class munin::client { ... munin::client::plugin { "postfix_mailqueue": name => "postfix_mailqueue", enable => "false" } } And the following inherited class: class munin::client::plugins::postfix inherits munin::client { munin::client::plugin {

Hi, Has anyone successfully performed this scenario? I''m installing Puppet Enterprise 3.1, and want to have the Console service running on the Puppet Master. However, I want to have the PuppetDB service on another server. It seems like the installer either puts all of the services on one host, or separate out to three hosts. I saw this discussed in

Get it here: http://script.aculo.us/downloads Short take on what''s new: -> Autocompletion took a notch up with incremental and local (js array) functionality -> Capability to remove draggables/droppables and redeclare sortables -> Effect.ScrollTo -> Fix memory leaks in IE and Gecko -> Make some 3rd-party js libraries comaptible, namely IE7.js -> Various tweaks and

Morning all I''m trying to get puppet setup to manage our env. I''ve managed to get the basic stuff working such as ntp, motd, users/groups, sudo, etc... I''m now starting to build a configuration framework for our applications, including java, glassfish, j2ee apps, etc... However I''ve hit a stumbling block... The relevant configuration is here: