Lostash grok parse restapi url issue

Elastic Stack Logstash
1

Hi ,

I am trying to parse the following url

  1. http://localhost:8001/restapi/user:id=ca00dfd1ccd5f95af329742a7600d8f0/org:id=3967844767629143/test

from the above url i want to parse the userid and orgid can anyone help me on this.

I have tried lot on this but not able to fix

2

The grok constructor web site can be of great help when constructing grok expressions.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.