Hi, my filebeat was got a grok error "Provided Grok expressions do not match field value" when publishing log to elasticsearch. However, the pattern using was generated by Grok debugger and passed the test. the log, for example, is like: [Info](TXN)2018-08-13 11:50:16.990574 request_handler.cpp:…

Fileabeat grok fail "Provided Grok expressions do not match field value"

cythwell (Cythwell) August 16, 2018, 6:42am 3

Hi, @kvch I had actually add them when I put pipeline to es.

Topic		Replies	Views
Filebeat error using ingest pipeline: Provided Grok expressions do not match field value Beats filebeat	4	6317	June 15, 2017
Provided Grok expressions do not match field value when the pattern field contains some regular expressions Beats filebeat	3	3584	May 31, 2018
java.lang.IllegalArgumentException: Provided Grok expressions do not match field value Beats filebeat	1	496	February 16, 2019
Elasticsearch GROK pattern failing even though it passes the debugger Elasticsearch	2	754	February 18, 2019
Provided Grok expressions do not match field value: Beats filebeat	1	428	February 4, 2021