Hello everyone
I am trying to pars mail enable activity loga there are millions of logs in un even pattern I write some of the pattern and logs pars in well manner ans structured but now the issue is so many logs parsing fail and every time i have to add and update grok pattern if new log pattern is coming and now config file is very huge how i can handle this kind of situation
Please help ...