반응형
Environment
To understand the Elastic Stack platform, let’s assume that Elasticsearch is a document database that stores the structured document.
The Log file format is unstructured data. Every single line of a log cannot be a single document. So, we need to parse the message and extract the key and values of the field. The program, Logstash read the files and made a structured document from an unstructured log file based on a single implemented log parser script.
반응형
'elastic' 카테고리의 다른 글
elasticsearch indexing 중 Create field (0) | 2023.04.24 |
---|---|
elasticsearch.yml add more (0) | 2023.04.23 |
elasticsearch backfill, forward-fill with previous log's value (0) | 2023.04.12 |
elasticsearch geo indexing -geospatial fields (0) | 2023.04.12 |
elastic geo_point type의 field 만들기 -geospatial fields (0) | 2023.04.03 |