Hello there. This works:
Also this works:
Their combination however does not work:
Any idea why?
Because in your grok pattern the two fields are separated by a single space, but in your data they are separated by space, dash, space. That is not going to match.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.