logstash.conf 511 B

12345678910111213141516171819202122
  1. input {
  2. stdin {
  3. codec => multiline {
  4. pattern => "^\["
  5. negate => true
  6. what => "previous"
  7. }
  8. }
  9. }
  10. filter{
  11. grok{
  12. match => {"message" => "(?m)^\[%{DATA:logdate}\] \[%{WORD:thread_trace_id}*\] \[%{WORD:biz_id}*\] \[%{LOGLEVEL:level}%{SPACE}*\] \[%{DATA:threadName}\] \[%{DATA:loggerName}\] \[%{DATA:method_line}\] - %{GREEDYDATA:msg}"}
  13. }
  14. date{
  15. match => ["logdate","yyyy-MM-dd HH:mm:ss.SSS"]
  16. }
  17. }
  18. output {
  19. stdout {
  20. }
  21. }