Hi,i make an module for my iis log,i use the default filebeat grok for IIS to parse the message, and I get an error like "Provided Grok expressions do not match field value:"
one example of my message log is
2018-07-10 11:47:26 100.111.16.33 GET /2code/handlers/IP-Block/waves/account/wlc-auth.ashx username=avir&pass=Avi12345 443 - 100.111.16.76 - 200 0 0 5599
how can i find whats the problem is, I tried to find
The script inside the Beats repo which lets you test your pipeline .
of your support but I didn't find the path.