After Updating Logstash to 7.7 from 7.6 regex isn't working the same

[andres-perez (Andrés Pérez)]

Hi!

Just to add more information, I think I have tackled similar issues in the past; maybe using the notation \x1B as the initial escape sequence is useful for your purpose.

Here is link to the information I compiled for a related issue:

Parsing special charaters with grok

These codes are special ANSI sequences used to change the color in terminal output. In simple words, these marks indicate to compatible console tools: start block of green characters INFO (end of the block and) return to default color Both the ^[ and the \e are different ways to encode a escape sequence; a good link to learn about it: http://jafrog.com/2013/11/23/colors-in-terminal.html I don't know why filebeat uses a different way to represent the same character than your original console …