Hello Sir
i have a single log file which have different diffrent pattern i just want to create a single grok which will work on all pattern please help me in this condation what should i do .
#log1
2018-06-14 13:55:59.059 : INFO : (50280 | DIRECTOR) : (IS | PC_IS_SVC_QA02_UNICODE) : node01_tclasetlq002 : VAR_27028 : Use override value [rf_data_conversion@tiffany.com] for user-defined workflow/worklet variable:[$$wf_email].
#log2
2018-06-14 13:55:59.059 : INFO : (50280 | DIRECTOR) : (IS | PC_IS_SVC_QA02_UNICODE) : node01_tclasetlq002 : VAR_27027 : Use default value [] for mapping variable:[$$wf_name].
#log3
2018-06-14 13:55:59.059 : INFO : (50280 | DIRECTOR) : (IS | PC_IS_SVC_QA02_UNICODE) : node01_tclasetlq002 : TM_6685 : Workflow: [wf_JDE_World_to_E1_RFConversion_F4201_F4211_to_F5847001_F5847003] Run Instance Name: [TAIWAN] Run Id: [301803]
Grok
%{DATESTAMP:time} : %{WORD:LOGLEVEL} : (%{DATA:d1}) : (%{DATA:d2}) : %{WORD:d3} : %{WORD:d4} : %{DATA:D5}[(?[a-zA-Z0-9_.+=:-]+@[0-9A-Za-z][0-9A-Za-z-]{0,62}(?:.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*)]%{DATA:D6}[%{GREEDYDATA:D7}]
This pattern work on #log1 please guide me ...