FarnazMostowfi
commented
5 years ago Hi Drazen,
logstash-obi-clickstream.conf is the config file that read/transform/extract the content from the logs into CSV format. Open the file and see the regex expressions applied on the "Message" and the output fields.
To add a new column you can either add a new output to this config file joining the two existing ones, a sample line would be: fields => ["@timestamp", ..."mobile","Referer"+"Page"]
Or create a new field in the "Filter" section, for example: ,"message","FullPath: %{DATA:DashPath} %{DATA:saw_http_DashboardCaption},"
Depending on version of your logstash and the log file you have, above syntax can be different...
Good luck, Farnaz
Hi! :)
First, I want to thank you for this excellent solution. It helps me a lot.
Second, I need to see whole URL's some user have run from OBIEE portal. I found in "rm_http*.log" that data I need is stored at "Referer" and "Page" tags. How can I "forward" this part of logs to CSV and after that, to DB table?
Thank you in advance for help!
Best regards from Croatia, Drazen