GROK Pattern to split string to multiple values

Elastic Stack Logstash
1

I am getting a string ".." in the logs and would like to split this using grok pattern. is there any method to do so ?
example:
input log string : java-app.ABCD.win-service-test
Output should be
app_name: java-app
org_name: ABCD
service_name: win-service-test

2

Hey @Mohanraj, is your question in regard to the grok filter plugin in Logstash? If so, I can move this topic over to the Logstash section.

3

Yes Brandon, this is related to the grok filter pattern.

Thanks,

Mohan

4 
grok { match => { "message" => "(?<app_name>[^.]*)\.(?<org_name>[^.]*)\.(?<service_name>[^.]*)" } }

would do it.

1 Like
5

Hi Badger, Thank you, this works fine.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.