Grok regex too long

Elastic Stack Logstash
1

Hello there. I am trying to apply a really long regex to a field in a log. I keep getting an error and logstash doesn't even start. The regex is made up of several smaller regexes connected with |, like this:

pattern_definitions => {"text1" => "regex1|regex2|regex3|regex4|regex5"}

match => {"message" => "%{text1:text_response}"}

I tried with just two regexes
regex1|regex2
and it works fine.

Is there any way this can be done?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.