filebeat.inputs:
type: log paths: /path/to/your/logs/*.log processors: dissect: tokenizer: “[%{date_time}] %{sessionid} [%{thread_name}] %{username} %{accountid} %{operation_all}” field: “message” target_prefix: “” overwrite_keys: trueif: equals: op…