Adding custom pattern failed

Elastic Stack Logstash
1

Hi experts

I am a newer to Kibana(6.x) , when I tried to add custom patterns with the instruction 'https://www.elastic.co/guide/en/kibana/current/grokdebugger-getting-started.html' but failed.

1

Can anyone help me out of this mess, thanks in advance!

Yours
Sincerely

2

Hi Dominic,

Kibana just provides the interface to grok debugger.
Can you please ask this question in logstash forum? They will be able to help you very fast :slight_smile:

Thanks
Bhavya

3

Thanks!:slight_smile:

4

So you want to add custom grok patterns to Logstash, not Kibana? Did you read the Custom Patterns section of the filter documentation?

5

I just want to develop my own custom grok patterns which of course will be applied to Logstash finally in Grok Debugger tab in Kibana WebUI as shown in the above picture. I think it's convenient for debugging. If I am not clear to you, let me know. Thank you.

6

To define a custom grok pattern in Kibana it needs to be JSON, e.g. like this:

{"POSTFIX_QUEUEID" : "[0-9A-F]{10,11}"}

See the example in the documentation.

7

Thank you very much. I think I got it.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.