elastic / elastic/logstash

log Iso 8583 parsing

Open
#8,621 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
14.9k
Forks
3.5k
Avg merge
1d 4h
Merged PRs (30d)
88

Description

i have log ISO 8583 of ATM transaction as below

> `2017-11-09 10:03:47,291 [Thread-40] INFO com.temenos.atmlog.LogListener - Response ISO Fields (1)(0110)(2)(9704195050409216)(3)(010000)(4)(000300000000)(7)(1109030001)(11)(351176)(12)(100342)(13)(1109)(15)(1109)(18)(6011)(22)(9010)(28)(000300000)(32)(970403)(37)(100342351176)(38)(081492)(39)(00)(41)(00001116)(42)(000000099999999)(43)(CN THANH BINH DONG THAP 704)(49)(704)(54)(0001704C002212686100)(102)(1000014957411704)`

in the log we can see that (1) is "field no" and the next (0110) is value of "field no"
i want to filter and parsing it with gork , please help me how to do
thanks so much

Contributor guide

Open the contributing guide

Research direction

Start with the supplied ISO 8583 log line and the Logstash Grok parsing entry points. Define how each field/value pair should be extracted and verify the resulting structured event against the sample; the issue provides no named file or test.

Written by the indexing model from the issue text.

Assessment

Domain
data-engineering
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.