How can i parse one field further into different fields in another grok pattern?

Elastic Stack Logstash
1

I have following match statement for an log event in which data2 field will be having some events repeated with similar pattern:

match =>["message","%{GREEDYDATA:data}process id %{NUMBER:pid}%{GREEDYDATA:data1}BBBBBB%{GREEDYDATA:data2}"]

I want to parse data2 field further into individual fields.....
How to do so.....
Thanks in advance.

2

Just add another grok filter.

grok {
  match => ["data2", "..."]
}
1 Like
3

Thnks