github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/weblogic-operator/logstash.conf (about)

     1  input {
     2    file {
     3      path => "/logs/operator*.log"
     4      start_position => "beginning"
     5      type => "weblogic-operator"
     6    }
     7  }
     8  
     9  filter {
    10    grok {
    11          match => ["message",'"timestamp":"%{DATA:timestamp}","thread":%{DATA:thread},"level":"*%{WORD:level}","class":"%{JAVACLASS:class}","method":"%{WORD:method}","timeInMillis":%{POSINT:timeInMillis},"message":%{QUOTEDSTRING:log},"exception":%{QUOTEDSTRING:exception},"code":"%{GREEDYDATA:code}"']
    12    }
    13    date {
    14       match => [ "timestamp", "MM-dd-YYYY'T'HH:mm:ss.SSSZ" ]
    15       locale => "en"
    16       timezone => "UTC"
    17       target => "@timestamp"
    18    }
    19    mutate {
    20       remove_field => ["message","timestamp"]
    21    }
    22  }
    23  
    24  #input {
    25  #  stdin {}
    26  #}
    27  
    28  output {
    29    elasticsearch {
    30      hosts => ["${ELASTICSEARCH_PROTOCOL}://${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}"]
    31      # Example configuration if ElasticSearch instance requires authentication and SSL:
    32      #ssl => true
    33      #user => "<username>"
    34      #password => "<password>"
    35      #cacert => '/usr/share/logstash/config/certs/ca.crt'
    36    }
    37    stdout { codec => rubydebug }
    38  }