Multiple matches with a single regex


Hi logstash users!

is it possible to catch all matches (global match) with a single regex?
E.g. given the following text, which gets processed by multiline plugin first:

Caused by: a.b.c.Exception1: text1
Caused by: a.b.c.Exception2: text2

and the corresponding grok match:

grok {
	match => {
		"message" => "(?m)Caused by: (?<exception>[\w\.\$]+):\s+?(?<reason>[^\n]+)"

Unfortunately it captures just the first match:

  "exception": [
  "reason": [

I'd like to have an array with both exceptions and text.

Is it possible at all?
Thank you!

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.