How do I match URL

Elastic Stack Logstash
1

Hi Team,

How do I match URL from below pattern? As well as how do I exclude " and ,.

Here I am starting..

"1078","http://www.innovationsystems.gr/RDFdk/","offline","malware_download","emotet,heodo,exe"

"%{INT:ID}","%{WORD:URL}

2

I would start with something like

  csv { }
  grok { match => { "column2" => "%{URIPROTO:uri_proto}://(?:%{USER:user}(?::[^@]*)?@)?(?:%{URIHOST:uri_domain})?(?:%{URIPATHPARAM:uri_param})?" } }
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.