Elasticsearch – Parse WildFly Application server Logs

To parse WildFly Application server logs in Elastic search, do the following:

• Create new pipleline and GROK Processor, here is a a GROK rule to parse it:

%{DATESTAMP:transactionDate},%{INT:LEVEL} %{WORD:Type} %{GREEDYDATA:CodePath}

• Create a new file stream log integration in Elastic agent, point to the new processor and enjoy.

Have fun.

Elasticsearch stops immediately after enabling network.host settings in elasticseach.yml file

Case:

After enabling network.host: 0.0.0.0 or dedicated IP to allow other nodes to join Elasticsearch cluster.

Solution:

You must increase the max VM map using:

sudo sysctl -w vm.max_map_count=262144