Multiple matches with a single regex

Elastic Stack Logstash
1

Hi logstash users!

is it possible to catch all matches (global match) with a single regex?
E.g. given the following text, which gets processed by multiline plugin first:

Caused by: a.b.c.Exception1: text1
Caused by: a.b.c.Exception2: text2

and the corresponding grok match:

grok {
	match => {
		"message" => "(?m)Caused by: (?<exception>[\w\.\$]+):\s+?(?<reason>[^\n]+)"
	}
}

Unfortunately it captures just the first match:

{
  "exception": [
    "a.b.c.Exception1"
  ],
  "reason": [
    "text1"
  ]
}

I'd like to have an array with both exceptions and text.

Is it possible at all?
Thank you!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.