Hi,
I am trying to match a line and separate it as two fields. The following is my line:
{\"event\":\"transcode_start\",\"task_uuid\":\"1a7ae3e4-434a-4d36-b6db-8ccfebadbbf6\",\"ding_id\":6439368420201886312,\"raw_key\":\"6439368420201886312.fsv\",\"transcoded_key\":\"6439368420201886312.mp4\"}\n>>>> COMMANDS [{:cmd=>\"converter/converter\\t/var/lib/video-transcoder/input/6439368420201886312.fsv\\t/var/lib/video-transcoder/output/6439368420201886312.mp4.tmp\\tv2\", :on_error=>[{:cmd=>:abort}]}, {:cmd=>\"ffmpeg\\t-i\\t/var/lib/video-transcoder/output/6439368420201886312.mp4.tmp\\t-i\\tring_logo.png\\t-filter_complex\\toverlay=x=(10):y=(main_h-overlay_h-10)\\t-pix_fmt\\tyuv420p\\t-movflags\\tfaststart\\t-c:v\\tnvenc\\t-preset\\thp\\t-vprofile\\tbaseline\\t-b:v\\t1M\\t-c:a\\tlibfdk_aac\\t-ar\\t48000\\t/var/lib/video-transcoder/output/6439368420201886312.mp4\\t-v\\terror\\t-y\\t-r\\t5\\t-an\\t-vf\\tscale=trunc(oh*a/2)*2:216\\t-g\\t5\\t-b:v\\t128k\\t-movflags\\tfaststart\\t/var/lib/video-transcoder/output/6439368420201886312_lq.mp4\", :on_error=>[{:cmd=>\"rm\\t/var/lib/video-transcoder/output/6439368420201886312.mp4\\t/var/lib/video-transcoder/output/6439368420201886312_lq.mp4\\t-f\"}, {:cmd=>\"cp\\tblack.mp4\\t/var/lib/video-transcoder/output/6439368420201886312.mp4\", :on_error=>[{:cmd=>:abort}]}]}]
with the grok match pattern as:
(?<json_message>.+\})(\\n>>>>\s\bCOMMANDS\b)%{GREEDYDATA:command_message}
It's shown as a valid match in this site : http://grokconstructor.appspot.com/do/match
However, it's showing _grokparsefailure when I am trying the same pattern in local logstash server. Can anyone please help in resolving this issue ? Thanks.