logging - Standardize log data in ELK - Elastic Logstash Kibana -


i'm using elk log managment.

what best practice manage log level. in 1 log lower case @ other bigger case.

enter image description here

where best place resolve this?

  • at logstash?
  • at elastic db?
  • kibana while execute query?

and how?

two suggestions:

  1. normalize string value. whether it's "debug", "debug" or "debug" you.
  2. add numerical equivalent.

this way, can run queries like: "severity_num:<=3" bad stuff , use string "severity" field in display.

more details here.


Comments

Popular posts from this blog

Capture and play voice with Asterisk ARI -

java - Why database contraints in HSQLDB are only checked during a commit when using transactions in Hibernate? -

visual studio - Installing Packages through Nuget - "Central Directory corrupt" -