Grok filter pattern file with capture group regex

(Jarlrmai) #1

I have the above regex for Grok, It works on the Grok Debugger

[View@6876 Severity=\"INFO\" Module=


  "severity": [

How do I add this to a pattern file, I can;t seem to see the syntax for using a named capture group in a pattern file, and I can't get it working on the Grok Debugger.

(Jarlrmai) #2

Can anyone help?

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.