Grok parse failures

Sometimes DATA will not do what you expect. You might be better off with a custom pattern

<?(Type)[^|]*>

will match anything that is not a pipe character.

1 Like