Actually for gelf-java logs “syslog_level” mapper works perfectly fine.
The problem is for glassfish server logs which i am sending with the help of filebeat.
Please find the format below…
[2019-07-08T13:18:35.440+0200] [Payara 4.1] [INFO] [NCLS-JMX-00005] [javax.enterprise.system.jmx] [tid: _ThreadID=46 _ThreadName=Thread-12] [timeMillis: 1562584715440] [levelValue: 800] [[
JMXStartupService has started JMXConnector on JMXService URL service:jmx:rmi://ip-10-142-244-132.eu-central-1.compute.internal:28386/jndi/rmi://ip-10-142-244-132.eu-central-1.compute.internal:28386/jmxrmi]]
I have applied the “LOGLEVEL” grok pattern as extractor. so on Glassfish server logs “Severity having a value INFO”
Glassfish application Logs by gelf-java “Severity: Informational”
Glassfish Server logs by filebeat “Severity: INFO”
Same goes to other loglevels.
I want only one value of Severity through out the logs respective to there loglevels.
I tried to create my log mapper above but it seems no function is available for that.
Please provide some direction.