For instance, we will not be able to parse or browse any input log files in our graphical user interface. We have only prepared and established a connection between the client and the server. We will need to configure our LogStash to define a way of manipulating shipped files. File logs formats are not standard, sending logs as one blob of data will not be useful. Thus, we seek a way of identifying their type and drill down into events to extract their values. This constructs the main heart of LogStash contribution in log files management, filtering.
In our case, we have different log files generated either by the Linux system or by other services, most importantly OpenStack ones.