Logstash extract multiple regex

Elastic Stack Logstash
#1

Hi to everyone, I need to extract some regex (I don't know how much) in a log line such as the following
"2017-01-01 2:04:08 - DEBUG --> SELECT like "%aaaaa%" )) and like "%bbbb%" )) GROUP BY order by asc LIMIT "

I need to extract "aaaaa" and "bbbb".

Could you help me?

Thanks in advance

#2

I would start by reffering you to https://grokdebug.herokuapp.com/ to test your queries

and your probably looking at a regex of

%{DATE:logdata} ${TIME:logtime} - DEBUG -> Select like "%%{WORD:field1}"

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.