Hi, I am currently filtering logs that normaly return this kind of field (among others):
and my grok for this field is the following:
but for certain machines I got this in the same field:
and my grok for this is the following:
What would be the best aproach to capture both types of fields?