hi all I have the following log line: {"rule":{"level":12,"comment":"apache error tagged by modsecurity","sidid":130401},"location":"(cli-git) 52.16.98.219->/var/log/apache2/error.log","full_log":"[Tue May 05 09:09:08.901326 2015] [:error] [pid 7085] [client 212.48.71.196] ModSecurity: Warning. P…

Grokparse failure - but grokdebugger works

nellicus (Antonio Bonuccelli) May 7, 2015, 8:58am 2

perhaps any whitespaces in the actual grok definition file?

Topic		Replies	Views
"_grokparsefailure" even though the grok pattern matches Logstash	9	4463	September 11, 2017
_Grokparsefailure even though pattern works in Grok Debugger Logstash	3	815	October 29, 2018
Filter is not working Logstash	6	1247	July 6, 2017
Grokparse failure mikrotik Logstash	7	3174	December 20, 2017
Grok tests pass, logstash still borks with "_grokparsefailure" Logstash	7	1504	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Grokparse failure - but grokdebugger works

Related topics