I am trying to parse my sample catalina.out file.
here is my tomcat.conf file i am giving to the logstash
./logstash -f conf.d/tomcat.conf -r
here is my tomcat.conf
input {
file {
path => "/elkstack/logs/input/catalina-sample.out"
codec => multiline {
pattern => "^\[<\d{1,2}"
negate => "true"
what => "previous"
}
}
}
filter {
grok {
match => { "message" => "%{GREEDYDATA:message}" }
}
output {
stdout{}
}
i am not seeing any parsing or any results. what am i doing wrong?
1 post - 1 participant