GROK debugger the parsing works but not in logstash

Elastic Stack Logstash
1

GROK filter

^%{TIMESTAMP_ISO8601:timestamp}%{SPACE}|%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}|%{SPACE}%{GREEDYDATA:service}%{SPACE}%{SPACE}|%{SPACE}%{WORD:class}%{SPACE}|%{SPACE}%{NUMBER:statuscode}%{SPACE}-%{SPACE}%{GREEDYDATA:resourcepath}%{SPACE}|%{SPACE}%{GREEDYDATA:description}$

log event
2018-11-27 07:06:13,628 | INFO | yWorker | Requestclass | 351 - enp-recr - 0.0.1.SNT | Receiver receives the Byte array [126, 126, 126, 126, 0, 0, 0, 213, 64, 213, 241, 231, 233, 201, 247, 194, 197, 241, 196, 196, 64, 64, 201, 226, 193, 64, 64, 64, 64, 64, 64, 64, 34, 84, 77, 45, 83, 84, 83, 45, 48, 48, 48, 55, 57, 56, 45, 50, 48, 48, 34, 44, 65, 83, 84, 65, 61, 48, 50, 44, 79, 83, 84, 65, 61, 48, 48, 59, 191]

2

You have not provided enough information, post your full config and any errors.

3

Thanks. I am able to debug and resolve this issue.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.