#logstash

anyone have guidance for using graylog2 in conjuction with a logstash/ES/Kibana3 setup?

Hello all

need some help with logstash

im trying to parse a event like:

<date>2013-02-02</date><alert>high</alert><message>This is an important message\r\nPlease, check this alert.\r\n.........</message>

I would like to get the fields "date", "alert" and "message" renamed to "description"

I have 2 problems with this

1) how to parse the keys and the values

2) how to handle the newline characters

Solution for 1) may be is KV filter... but sometimes in <message> I receive a lot of different characters (dump's etc..) so.... i dont know if KV is the best

anyone can give me some hints?