Good time of the day. I'm parsing log files like these 2017.04.25 09:55:22 [LOG] [4cdb70e9-7e41-48c6-a3b4-889790630641] [10.4.26.21:19285] Open 2017.04.25 09:55:22 [LOG] [4cdb70e9-7e41-48c6-a3b4-889790630641] [10.4.26.21:19285] Recieve !SAPI!CSG|000000000000|| 2017.04.25 09:55:22 [LOG] [4cdb70e9…

What do you have in output? (using stdout { codec => rubydebug {} }) Does it tell you _grokparsefailed? or is there any other error? By the way, test: if [command] == "Recieve " (typo)

Discuss the Elastic Stack

Logstash-filter-grok repeatedly

Elastic Stack Logstash

system (system) Closed June 3, 2017, 4:47am 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Grok filter for different kinds of log in a single file Logstash	4	364	June 17, 2020
Can someone help with the grok, I can't figure out how to make it work? Logstash	6	603	February 12, 2019
Logstash parsing each log multiple times Logstash	5	1303	September 25, 2018
Parsing repeated patterns in logstash Logstash	7	2634	July 6, 2017
Multiple grok filter Logstash	16	24184	October 3, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash-filter-grok repeatedly

Related topics