Monitoring string with dynamic data

Elastic Stack Elasticsearch
#1

Hi

I have a string which has a dynamic number in the middle of it, how woud i go about monitoring the string considering it wont be the same every time due to the changing number?

eg: (ISO-host-async-XXX) Unknown Exception java.lang.NullPointerException

The XXX in the above string will be a 3 digit number which changes.

#2

Welcome!

I believe that you could use a grok or dissect pattern to extract just the meaningful information (ISO-host-async) into a field.

#3

Thanks for the quick reply! I am unfamiliar with dissect pattern, could you direct me toward a good resource which explains how to set this up?

Thanks

#4

The documentation is

I also found this nice online tool today:

https://dissect-tester.jorgelbg.me/

#5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.