i'd like to detect a part from a message matching a specific sentence .
When the searched part doesn't contain numbers it works fine with this grok filter :
match => ["Message" , "(^|\W+)(?<keyword>parsing failed for header from)(\W+|$)"]
it detects the partial message "parsing failed for header from" correctly.
what shall i add to make it detect a message like this :
" warning: get digits failed, (450) "
(the (^|\W+) doesn't seem to do the task )
Thanks in advance .