How to extract data from this pattern, with grok filter its not working

How to extract data from this pattern, with grok filter its not working

below data is available in log file

logEvent": {
"message": "JDBC - Exception. Not retrying. event: "{"LastModifiedDate":"2018-09-12T18:19:15.000Z","Ownership":"Public","Website":"http://www.uos.com","NumberOfEmployees":24000"}

I need to extract column/event name as "NumberOfEmployees"

NumberOfEmployees : 24000

Since you didn't post the log snippet as preformatted text it has been mangled so it's not clear exactly what it looks like. But it seems to be JSON, in which case you should use a json filter to parse it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.