Grok Syntax

Elastic Stack Logstash
1

Hi all :slight_smile: ,

I need help with a log file that I need to make a filter from it but I can't since I am not very experienced with grok..

The log is like
2020-07-27 03:04:04,708 INFO hosty.bow.hh.hsw_5421 Target 'RegistrationService', Duration 5738051 ns, Type 'USERVALIDATION', Params '[SOMETHING]'

I need to extract all the fields.

Thank you all for your time :slight_smile:

2

Hi,

The logs seems to have proper delimiter, I think dissect filter plugin might be useful to parse the logs.

Hope this could help you!