Nagios Support Forum

Posted: **Mon Aug 07, 2017 11:45 pm**

we want to filtering haproxy tcp log, can we use the below filter?

if [program] == 'haproxy' {
        grok {
            match => [ 'message', '%{HAPROXY} ]
        }
        date {
            match => [ 'timestamp', 'dd/MMM/yyyy:HH:mm:ss Z' ]
        }
    geoip {
        source => 'client_ip'
    }
    }

will above filter ok?
thanks.

Posted: **Tue Aug 08, 2017 11:26 am**

I would try the following slight variation instead:

Code: Select all

if [program] == 'haproxy' {
        grok {
            match => [ 'message', '%{HAPROXYTCP}' ]
        }
        date {
            match => [ 'timestamp', 'dd/MMM/yyyy:HH:mm:ss Z' ]
        }
    geoip {
        source => 'client_ip'
    }
    }

Nagios Support Forum

haproxy

haproxy

Re: haproxy