Hi All,
I am quite new to the magic world of Grok. Any help will be thankful.
I need to apply filter for the following file.
2022-08-22 22:18:59 , 666 INFO @ (blockurcolumn-11) [rbbit_MQ_Versa.appache 75] start collection of :
messageid: 8765568
<sol:create Id="8765568">
com:createlibidFR%67com:createlibid
com:doinglibidFRANCEcom:doinglibid
com:complelibidTRUEcom:complelibid
</sol:create Id>
==================================================
The grok pattern i am trying to use
(?m)(?<Rabbit_datetimeTMP>.{23}) %{LOGLEVEL:Level}.messageid:\s%{BASE10NUM:Id}
<%{GREEDYDATA:Data}>
Requirement:
I need to grok the datetime logelevel message id and the first line of xml(</Xml-fragment xmlns: sol ="http://www.rabitmq.com/was/xml/complte" xmlns:ns2="http://www.rabitmq.com/was/xml/complte">) . starts with< and ends with >.
unfortunately its taking the entire xml format.