filter grok pattern that i am using is:
filter {
grok {
patterns_dir => ["./patterns"]
match=>["message","<%{DATA:log_timestamp}> <%{WORD:log_level}> <%{DATA:servername}> <%{DATA:timer}> %{OSBMESSAGE:Message}"]
}
}
The Log file i am trying to analyze is capture the payload is:
<Feb 13, 2018 9:29:47 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: fault ::: <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
<con:errorCode>BEA-380001</con:errorCode>
<con:reason>Internal Server Error</con:reason>
<con:location>
<con:node>RouteTo_SO_JDE_ProcessSalesOrder_BS</con:node>
<con:path>response-pipeline</con:path>
</con:location>
</con:fault>>
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: varRequest ::: <SOAP-ENV:Body xmlns:ns2="java:oracle.e1.bssv.util.J4100010.valueobject" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns1="java:oracle.e1.bssv.JP420000.valueobject" xmlns:ns4="http://oracle.e1.bssv.JP420000/" xmlns:ns3="java:oracle.e1.bssv.util.J0100010.valueobject" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<ns4:getCustomerItemPriceElement>
<ns1:BusinessUnit>2000</ns1:BusinessUnit>
<ns1:PriceAdjustmentId xsi:nil="true"/>
<ns1:CurrencyCode xsi:nil="true"/>
<ns1:RateExchange xsi:nil="true"/>
<ns1:FreightHandlingCode xsi:nil="true"/>
<ns1:DiscountTrade xsi:nil="true"/>
<ns1:CustomerPriceGroupCode xsi:nil="true"/>
<ns1:ZoneNumber xsi:nil="true"/>
<ns1:RouteCode xsi:nil="true"/>
<ns1:StopCode xsi:nil="true"/>
<ns1:Product>
<ns1:BusinessUnit xsi:nil="true"/>
<ns1:LineType xsi:nil="true"/>
<ns1:LotNumber xsi:nil="true"/>
<ns1:Location xsi:nil="true"/>
<ns1:UnitOfMeasureCodeVolume xsi:nil="true"/>
<ns1:UnitOfMeasureCodeWeight xsi:nil="true"/>
<ns1:ItemVolume xsi:nil="true"/>
<ns1:ItemWeight xsi:nil="true"/>
<ns1:ShipTo xsi:nil="true"/>
<ns1:Item>
<ns2:ItemId xsi:nil="true"/>
<ns2:ItemProduct>571202</ns2:ItemProduct>
<ns2:ItemCatalog xsi:nil="true"/>
<ns2:ItemFreeForm xsi:nil="true"/>
<ns2:ItemCustomer xsi:nil="true"/>
<ns2:ItemDescription xsi:nil="true"/>
<ns2:ItemUOMPrimary xsi:nil="true"/>
<ns2:ItemUOMSecondary xsi:nil="true"/>
</ns1:Item>
</ns1:Product>
<ns1:TransactionQuantity>1</ns1:TransactionQuantity>
<ns1:UnitOfMeasureCodeTransaction>CA</ns1:UnitOfMeasureCodeTransaction>
<ns1:UnitOfMeasureCodePricing xsi:nil="true"/>
<ns1:DatePriceEffective>2018-02-13T00:00:00</ns1:DatePriceEffective>
<ns1:AgreementID xsi:nil="true"/>
<ns1:PaymentTermsCode xsi:nil="true"/>
<ns1:PaymentInstrumentCode xsi:nil="true"/>
<ns1:ModeOfTransportCode xsi:nil="true"/>
<ns1:StatusCodeDuty xsi:nil="true"/>
<ns1:EndUseCode xsi:nil="true"/>
<ns1:LineOfBusinessCode xsi:nil="true"/>
<ns1:PriceCode1>JM</ns1:PriceCode1>
<ns1:PriceCode2 xsi:nil="true"/>
<ns1:PriceCode3 xsi:nil="true"/>
<ns1:Customer>
<ns1:SoldTo xsi:nil="true"/>
<ns1:ShipTo>
<ns3:EntityId>50688260</ns3:EntityId>
<ns3:EntityLongId xsi:nil="true"/>
<ns3:EntityTaxId xsi:nil="true"/>
</ns1:ShipTo>
</ns1:Customer>
<ns1:Processing>
<ns1:ProcessingVersion>AEU0011</ns1:ProcessingVersion>
</ns1:Processing>
<ns1:Carrier xsi:nil="true"/>
</ns4:getCustomerItemPriceElement>
</SOAP-ENV:Body>>
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: body ::: <env:Body xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Fault>
<faultcode>env:Server</faultcode>
<faultstring>CAUSE . . . . The price which was retrieved through advanced pricing is
invalid because at least one mandatory price adjustment was not
found.
RESOLUTION. . Determine the missing price adjustment and correct or add the
necessary price adjustment detail records so that the mandatory
price adjustment will be found.
CAUSE . . . . The operation did not succeed. .
RESOLUTION: See jde.log or jdedebug.log for more details on causes</faultstring>
<detail>
<java:BusinessServiceException xmlns:java="java:oracle.e1.bssvfoundation.exception">
<java:RequestID>10.160.15.44:5666611518519588085:36793</java:RequestID>
<java:Message>CAUSE . . . . The price which was retrieved through advanced pricing is
invalid because at least one mandatory price adjustment was not
found.
RESOLUTION. . Determine the missing price adjustment and correct or add the
necessary price adjustment detail records so that the mandatory
price adjustment will be found.
CAUSE . . . . The operation did not succeed. .
RESOLUTION: See jde.log or jdedebug.log for more details on causes</java:Message>
</java:BusinessServiceException>
</detail>
</env:Fault>
</env:Body>>
<Feb 13, 2018 9:29:48 PM CST> <Error> <ALSB Logging> <BEA-000000> < [RouteTo_SO_JDE_ProcessSalesOrder_BS, _onErrorHandler-5123344876563274982-167c5a26.13ca89c97be.-7a4b, Reply with Failure, ERROR] :: fault ::: <con:fault xmlns:con="http://www.bea.com/wli/sb/context">
<con:errorCode>BEA-380001</con:errorCode>
<con:reason>Internal Server Error</con:reason>
<con:location>
<con:node>RouteTo_SO_JDE_ProcessSalesOrder_BS</con:node>
<con:path>response-pipeline</con:path>
</con:location>
</con:fault>>
the filter key "OSBMESSAGE" is something that i am struggling to create as of now.