How to filter IP from a log file using Logstash

Question

Hi Guys,

I am to retrieve IP from my webserver log file using Logstash. Can anyone help me how can I do this?

Answer 1

Hi@akhtar,

You can use the filter plugin in Logstash. It will help you to retrieve particular data. There are lots of inbuilt Regex available. To find the IP address, IP Regex is available. I have attached one example below.

filter {
  grok {
  match => [ "message", "%{IP:myclientIP}" ]
  }
}

I hope this will help you.