Grok pattern for dynamic field


(Satyaban Dalabehera) #1

I have some log file having pattern like
Platform = iOS || iOSRegdID = 1034 || Status = Login || LoggedIn successfully
Platform = Android || AndroidRegdID = 1024 || Status = Login || LoggedIn successfully
Platform = iOS || iOSRegdID = 104 || Status = Login || LoggedIn successfully
Platform = Android || AndroidRegdID = 1024 || Logout successfully
Platform = iOS || iOSRegdID = 1044 || Status = Login || LoggedIn successfully

Here when Plat form is iOS second field is RegID where as if platform is android then it is AndroidRegID so how can I write grok pattern for same to get values for RegID

Again most wired thing when app logout then Status filed is absent so how to handle all those scenario sothat I can have a proper dashboard at Kibana.

Kindly help whether it is possible or not .


(Mark Walkom) #2

Please don't post the same question across multiple categories - Grok Pattern for Specific words in side message field


(Mark Walkom) #3