Tag: logstash

  • from filebeat to logstash

    —

    by

    martin
    in

    In logstash.yml you can parse the data coming from the earlier filebeat example with a ‘filter’. A ‘kv’ filter is for splitting data in key-value pairs and the default is to expect a comma as a separator. The values are converted to strings unless otherwise specified.  The ‘mutuate’ section allows them to be converted to…