In our (grok) logstash configuration we use a matching pattern like
with example log file entry
file path /opt/foo/bar/file.xml found
Until version 1.5.4 i get a field "filename" with value "/file.xml".
Since version 1.5.5 (and 1.5.6) the log line will not be parsed at all. My logstash just hangs.
The same behaviour appears in logstash 2.1.1 (!).
This seems a change in behaviour in logstash since version 1.5.4.
Is this a desired behaviour or simply a bug?