GROK Pattern to split string to multiple values

I am getting a string ".." in the logs and would like to split this using grok pattern. is there any method to do so ?
input log string :
Output should be
app_name: java-app
org_name: ABCD
service_name: win-service-test

Hey @Mohanraj, is your question in regard to the grok filter plugin in Logstash? If so, I can move this topic over to the Logstash section.

Yes Brandon, this is related to the grok filter pattern.



grok { match => { "message" => "(?<app_name>[^.]*)\.(?<org_name>[^.]*)\.(?<service_name>[^.]*)" } }

would do it.

Hi Badger, Thank you, this works fine.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.