Plex Media Server Log Format

General Discussions
1

I am working on building an ElasticSearch / Logstash pipeline and building grok filters to parse the Plex Media Server logs.

After pull in some of my logs I found that the Plex Media Server logs don’t really have a standardized format besides the simple pattern:

%{MONTH} %{MONTHDAY}, %{YEAR} %{TIME} \[(?<session_id>[0-9]x[0-9a-f]{4,9})\] %{LOGLEVEL} - %{GREEDYDATA:message}

However I would like to be able to determine when a login occurs, when a movie / tv show is played / etc. Does anyone have insight on this?

Thanks!

2

Why are you inventing the wheel twice? :wink:
PlexPy does already do that.
You could also analyze its source code to find out how it works.

3

Oh wow, thanks! Totally didn’t know that existed. Thanks @OttoKerner ! I will give that a shot but the main purpose of me trying this out was to learn the ELK stack :smiley: