Grok debugger works but logstash fails multiple lines

Elastic Stack Logstash
1

Hello.
I am trying to use the following regex to capture some info from a log entry:

(?m)(?<=responses=)(.*)(?=extraData)

Now it works in the grok debugger:

image
image1032×1281 48.8 KB

But it fails in logstash:

image
image714×538 25.2 KB

Any idea why that might be the case?

Has it something to do with the use of the (?m) qualifier?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.