CODEWITHSUNDEEP
loggingelasticsearchlogstashkibanaelastic-stack
Amir Katz
Amir Katz

Reputation: 1037

Standardize log data in ELK - Elastic Logstash Kibana

I'm using ELK for log managment.

What is the best practice for manage log level. In one log its lower case at the other its bigger case.

enter image description here

Where is the best place to resolve this?

And how?

Upvotes: 0

Views: 857

Answers (1)

Alain Collins
Alain Collins

Reputation: 16362

Two suggestions:

  1. normalize the string value. Whether it's "DEBUG", "Debug" or "debug" is up to you.
  2. add a numerical equivalent.

This way, you can run queries like: "severity_num:<=3" to get the bad stuff and then use the string "severity" field in the display.

More details here.

Upvotes: 2

Related Questions