我知道我可以将日志从logstash推送到redis,但开箱即用,我认为日志只能推送到像list..is这样的数据结构中。有没有办法将日志从logstash推送到redis?例如,如果logstash可以从其源中拉出一条消息(采用json格式),如下所示
{"blahKey":{"utcTimestamp":"2014-11-12T10:00","somefield":"ABC","somefield":"DEF","somefield":20,"pid":182,"somefield":256,"Stay":0},"blahValue":{"someVal":1,"someVal":0}}但需要以以下格式插入到redis中
"ABC.DEF.20.182.256.0", {"someVal":1,"someVal":0}1.如何解析来自{"utcTimestamp":"2014-11-12T10:00","somefield":"ABC","somefield":"DEF","somefield":20,"pid":182,"somefield":256,"Stay":0} to "ABC.DEF.20.182.256.0"的传入消息我需要使用grok筛选器吗,patter matching...please帮助我开始
2.如何管理以"ABC.DEF.20.182.256.0", {"someVal":1,"someVal":0}形式插入到redis
发布于 2015-11-13 22:57:15
您可以通过以下方式使用带有gsub方法的变分插件
mutate {
gsub => [
"fieldname", "regex for prefix clutter", "prefix character",
"fieldname", "regex for delimeting clutter", "delimeter character",
"fieldname", "regex for suffix clutter", "suffix character"
]
}https://stackoverflow.com/questions/26935236
复制相似问题