Grok Syntax

Hi all :slight_smile: ,

I need help with a log file that I need to make a filter from it but I can't since I am not very experienced with grok..

The log is like
2020-07-27 03:04:04,708 INFO hosty.bow.hh.hsw_5421 Target 'RegistrationService', Duration 5738051 ns, Type 'USERVALIDATION', Params '[SOMETHING]'

I need to extract all the fields.

Thank you all for your time :slight_smile:

Hi,

The logs seems to have proper delimiter, I think dissect filter plugin might be useful to parse the logs.

Hope this could help you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.