Filtering log message from Mulesoft app with grok

Elastic Stack Logstash
1

Hi, I have the next message from a Mulesoft app
"message": "event:1072eae0-5723-11ea-b982-0ad52e78f90f correlationId=ab7ab3a6-32b7-4529-872f-af0321c3f418"

I want to filter and get the "event" and "correlationId" in separate fields like this to be
{
"event": 1072eae0-5723-11ea-b982-0ad52e78f90f,
"correlationId": ab7ab3a6-32b7-4529-872f-af0321c3f418
}
I know I can use grok, but how the grok pattern should look to be able to get these fields?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.