You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: manage-data/ingest/ingesting-data-from-applications/ingest-logs-from-python-application-using-filebeat.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ products:
11
11
12
12
# Ingest logs from a Python application using Filebeat
13
13
14
-
This guide demonstrates how to ingest logs from a Python application and deliver them securely into an {{ech}} deployment. You’ll set up Filebeat to monitor a JSON-structured log file with fields formatted according to the Elastic Common Schema (ECS). You’ll then view real-time visualizations of the log events in {{kib}} as they occur. While Python is used for this example, this approach to monitoring log output is applicable across many client types. Check the list of [available ECS logging plugins](ecs-logging://reference/intro.md).
14
+
This guide shows how to ingest logs from a Python application and deliver them securely into an {{ech}} deployment. You’ll set up Filebeat to monitor a JSON-structured log file with fields formatted according to the Elastic Common Schema (ECS). You’ll then view real-time visualizations of the log events in {{kib}} as they occur. While Python is used for this example, this approach to monitoring log output is applicable across many client types. Check the list of [available ECS logging plugins](ecs-logging://reference/intro.md).
15
15
16
16
In this guide, you will:
17
17
@@ -264,7 +264,7 @@ You can use a wildcard (`*`) character to indicate that all log files in the spe
264
264
265
265
### Add the JSON input options
266
266
267
-
Filebeat’s `filestream`input configuration includes several options for decoding logs structured asJSON messages. These options can be setin`parsers.ndjson`. Filebeat processes the logs line by line, so it’s important that they contain one JSONobject per line.
267
+
Filebeat’s `filestream`input configuration includes several options for decoding logs structured asJSON messages. You can set these optionsin`parsers.ndjson`. Filebeat processes the logs line by line, so it’s important that they contain one JSONobject per line.
268
268
269
269
For this example, set Filebeat to use the `ndjson` parser with the following decoding options:
270
270
@@ -346,7 +346,7 @@ Filebeat is now set to collect log messages and stream them to your deployment.
346
346
347
347
## Send Python logs to {{es}} [ec-python-logs-send-ess]
348
348
349
-
It’s time to send some log data into {{es}}!
349
+
It’s time to send some log data into {{es}}.
350
350
351
351
### Launch Filebeat and `elvis.py`
352
352
@@ -394,7 +394,7 @@ Now you can create visualizations based off of the Python application log data:
394
394
1. In the main menu, select **Dashboards** → **Create dashboard**.
395
395
2. Select **Create visualization**. The [Lens](../../../explore-analyze/visualize/lens.md) visualization editor opens.
396
396
3. In the **Data view** dropdown box, select _filebeat-*_, if it isn’t already selected.
397
-
4. In the dropdown that set the visualization type, select **Bar**and**Stacked**, if they aren’t already selected.
397
+
4. In the menu for setting the visualization type, select **Bar**and**Stacked**, if they aren’t already selected.
398
398
5. Check that the [time filter](../../../explore-analyze/query-filter/filtering.md) isset to **Last 15 minutes**.
399
399
6. From the **Available fields**list, drag and drop the `@timestamp` field onto the visualization builder.
400
400
7. Drag and drop the `log.level` field onto the visualization builder.
@@ -409,7 +409,7 @@ Now you can create visualizations based off of the Python application log data:
409
409
Let’s create a second visualization:
410
410
411
411
1. Select **Create visualization**.
412
-
2. In the dropdown that set the visualization type, select **Bar**and**Stacked**, if they aren’t already selected.
412
+
2. In the menu for setting the visualization type, select **Bar**and**Stacked**, if they aren’t already selected.
413
413
3. From the **Available fields**list, drag and drop the `@timestamp` field onto the visualization builder.
414
414
4. Drag and drop the `http.request.body.content` field onto the visualization builder.
415
415
5. In the chart settings area under **Breakdown**, select **Top values of http.request.body.content**.
@@ -423,7 +423,7 @@ Let’s create a second visualization:
423
423
Now, create one final visualization:
424
424
425
425
1. Select **Create visualization**.
426
-
2. In the dropdown that set the visualization type, select **Pie**.
426
+
2. In the menu for setting the visualization type, select **Pie**.
427
427
3. From the **Available fields**list, drag and drop the `log.level` field onto the visualization builder. A pie chart appears.
428
428
429
429

0 commit comments