Grok filter for Oracle OSB Server logs


filter grok pattern that i am using is:

filter {
  grok {
  patterns_dir => ["./patterns"]
  match=>["message","<%{DATA:log_timestamp}> <%{WORD:log_level}> <%{DATA:servername}> <%{DATA:timer}> %{OSBMESSAGE:Message}"]
}
}

The Log file i am trying to analyze is capture the payload is:

<Feb 13, 2018 9:29:47 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: fault ::: <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
  <con:errorCode>BEA-380001</con:errorCode>
  <con:reason>Internal Server Error</con:reason>
  <con:location>
    <con:node>RouteTo_SO_JDE_ProcessSalesOrder_BS</con:node>
    <con:path>response-pipeline</con:path>
  </con:location>
</con:fault>> 
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: varRequest ::: <SOAP-ENV:Body xmlns:ns2="java:oracle.e1.bssv.util.J4100010.valueobject" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="java:oracle.e1.bssv.JP420000.valueobject" xmlns:ns4="http://oracle.e1.bssv.JP420000/" xmlns:ns3="java:oracle.e1.bssv.util.J0100010.valueobject" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <ns4:getCustomerItemPriceElement>
    <ns1:BusinessUnit>2000</ns1:BusinessUnit>
    <ns1:PriceAdjustmentId xsi:nil="true"/>
    <ns1:CurrencyCode xsi:nil="true"/>
    <ns1:RateExchange xsi:nil="true"/>
    <ns1:FreightHandlingCode xsi:nil="true"/>
    <ns1:DiscountTrade xsi:nil="true"/>
    <ns1:CustomerPriceGroupCode xsi:nil="true"/>
    <ns1:ZoneNumber xsi:nil="true"/>
    <ns1:RouteCode xsi:nil="true"/>
    <ns1:StopCode xsi:nil="true"/>
    <ns1:Product>
      <ns1:BusinessUnit xsi:nil="true"/>
      <ns1:LineType xsi:nil="true"/>
      <ns1:LotNumber xsi:nil="true"/>
      <ns1:Location xsi:nil="true"/>
      <ns1:UnitOfMeasureCodeVolume xsi:nil="true"/>
      <ns1:UnitOfMeasureCodeWeight xsi:nil="true"/>
      <ns1:ItemVolume xsi:nil="true"/>
      <ns1:ItemWeight xsi:nil="true"/>
      <ns1:ShipTo xsi:nil="true"/>
      <ns1:Item>
        <ns2:ItemId xsi:nil="true"/>
        <ns2:ItemProduct>571202</ns2:ItemProduct>
        <ns2:ItemCatalog xsi:nil="true"/>
        <ns2:ItemFreeForm xsi:nil="true"/>
        <ns2:ItemCustomer xsi:nil="true"/>
        <ns2:ItemDescription xsi:nil="true"/>
        <ns2:ItemUOMPrimary xsi:nil="true"/>
        <ns2:ItemUOMSecondary xsi:nil="true"/>
      </ns1:Item>
    </ns1:Product>
    <ns1:TransactionQuantity>1</ns1:TransactionQuantity>
    <ns1:UnitOfMeasureCodeTransaction>CA</ns1:UnitOfMeasureCodeTransaction>
    <ns1:UnitOfMeasureCodePricing xsi:nil="true"/>
    <ns1:DatePriceEffective>2018-02-13T00:00:00</ns1:DatePriceEffective>
    <ns1:AgreementID xsi:nil="true"/>
    <ns1:PaymentTermsCode xsi:nil="true"/>
    <ns1:PaymentInstrumentCode xsi:nil="true"/>
    <ns1:ModeOfTransportCode xsi:nil="true"/>
    <ns1:StatusCodeDuty xsi:nil="true"/>
    <ns1:EndUseCode xsi:nil="true"/>
    <ns1:LineOfBusinessCode xsi:nil="true"/>
    <ns1:PriceCode1>JM</ns1:PriceCode1>
    <ns1:PriceCode2 xsi:nil="true"/>
    <ns1:PriceCode3 xsi:nil="true"/>
    <ns1:Customer>
      <ns1:SoldTo xsi:nil="true"/>
      <ns1:ShipTo>
        <ns3:EntityId>50688260</ns3:EntityId>
        <ns3:EntityLongId xsi:nil="true"/>
        <ns3:EntityTaxId xsi:nil="true"/>
      </ns1:ShipTo>
    </ns1:Customer>
    <ns1:Processing>
      <ns1:ProcessingVersion>AEU0011</ns1:ProcessingVersion>
    </ns1:Processing>
    <ns1:Carrier xsi:nil="true"/>
  </ns4:getCustomerItemPriceElement>
</SOAP-ENV:Body>> 
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: body ::: <env:Body xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
  <env:Fault>
    <faultcode>env:Server</faultcode>
    <faultstring>CAUSE . . . .  The price which was retrieved through advanced pricing is
               invalid because at least one mandatory price adjustment was not
               found.
RESOLUTION. .  Determine the missing price adjustment and correct or add the
               necessary price adjustment detail records so that the mandatory
               price adjustment will be found.

CAUSE . . . .  The operation did not succeed.               .
RESOLUTION:    See jde.log or jdedebug.log for more details on causes</faultstring>
    <detail>
      <java:BusinessServiceException xmlns:java="java:oracle.e1.bssvfoundation.exception">
        <java:RequestID>10.160.15.44:5666611518519588085:36793</java:RequestID>
        <java:Message>CAUSE . . . .  The price which was retrieved through advanced pricing is
               invalid because at least one mandatory price adjustment was not
               found.
RESOLUTION. .  Determine the missing price adjustment and correct or add the
               necessary price adjustment detail records so that the mandatory
               price adjustment will be found.

CAUSE . . . .  The operation did not succeed.               .
RESOLUTION:    See jde.log or jdedebug.log for more details on causes</java:Message>
      </java:BusinessServiceException>
    </detail>
  </env:Fault>
</env:Body>> 
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: fault ::: <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
  <con:errorCode>BEA-380001</con:errorCode>
  <con:reason>Internal Server Error</con:reason>
  <con:location>
    <con:node>RouteTo_SO_JDE_ProcessSalesOrder_BS</con:node>
    <con:path>response-pipeline</con:path>
  </con:location>
</con:fault>>

the filter key "OSBMESSAGE" is something that i am struggling to create as of now.