Grok pattern failing in ingest pipeline, but working in grok debugger


(ujjain) #1

My grok pattern works fine in https://grokdebug.herokuapp.com/, but not on the pipeline.

What could be the cause?

09-Feb-2018 15:32:35.559 WARNING [monkey.co.uk-startStop-1] org.apache.tomcat.jdbc.pool.ConnectionPool$PoolCleaner. Database connection pool evicter thread interval is set to lower than 1 second.
%{MONTHDAY}[/-]%{MONTH}[/-]%{YEAR} %{TIME}%{SPACE}%{WORD:loglevel}%{SPACE}%{GREEDYDATA:log_text}

{
"catalina.log": {
"description": "Pipeline catalina.log",
"processors": [
{
"grok": {
"field": "message",
"patterns": [
"%{MONTHDAY}[/-]%{MONTH}[/-]%{YEAR} %{TIME}%{SPACE}%{WORD:loglevel}%{SPACE}%{GREEDYDATA:log_text}"
]
}
},
{
"grok": {
"field": "message",
"patterns": [
"%{MONTH}%{SPACE}%{MONTHDAY},%{SPACE}%{YEAR}%{SPACE}%{HOUR}:?%{MINUTE}(?::?%{SECOND})%{SPACE}(?:AM|PM)%{SPACE}%{GREEDYDATA:log_text}"
]
}
}
]
}
}


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.