Nagios Support Forum

Yes, is the apache_default: if [program] == 'apache_access' { grok { match => [ 'message', '%{COMBINEDAPACHELOG}'] } date { match => [ 'timestamp', 'dd/MMM/yyyy:HH:mm:ss Z', 'MMM d HH:mm:ss', 'MM M dd HH:mm:ss', 'ISO8601' ] } mutate { replace => [ 'type', 'apache_access' ] convert => [ 'bytes', 'int...

No, that's strange, because I see this structure in the error log: timestamp + class + pid + client + message. [Mon Sep 21 16:28:56.074781 2020] [autoindex:error] [pid 154366] [client xxx:xxx] AH01276: Cannot serve directory /WWW/html/: No matching DirectoryIndex But the LS doesn't show the client i...

Hi Scott, thanks for your answer. Yes the client side apache error log has the "client ip" configured, then in the filters of LG we have these configured: #geoip geoip { source => 'clientip' } #geoip_access if [geoip_access] == 'apache_access' { geoip { source => 'clientip' } } #geoip_erro...

Hello, I'm new in the forum.
I would like to ask if someone knows how to configure bettermaps with geoIP over "error logs", I already have the configuration over "access log" and it works great.
Thanks for your help.
Agustin.