Hi,
I am new in logstash. I try to translate a logline like this:
2017-06-30 14:49:21 aaa_BBB12345 BBB1111111111111111111111111111 ERROR Received file not found: /path/to/somewhere/1.txt
I use the folowing grok:
(%{TIMESTAMP_GDIL:timestamp-gdil})\s+(%{PROCESS_TYPE:process_type})+_+(%{FLOWID:flowid})\s+(%{UNIQUEID:uniqueid})\s+(%{LOGLEVEL:loglevel})\s+(%{GREEDYDATA:msg})
The problem is that for msg, the value is only ""msg" => "Received file not found:"" instead of "msg" => "Received file not found: /path/to/somewhere/1.txt"
Do you have any ideea how can I get the entire string for msg?
Thank you in advance!
Lucian