Need help for creating filter pattern based on custom logs

Elastic Stack Logstash
1

Hi All,
I am new to this technology started learning, need help in writing filter plugin which will parse custom logs from the server.

External User(dummy-user) is Mapped to Temp User(dummy-user) with Role(s): role1 role2
10.100.200.300 - dummy-user [30/Nov/2022:11:03:44 -0600] "GET / HTTP/1.1" 200 93631 - "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
10.100.200.300 - dummy-user [30/Nov/2022:11:03:44 -0600] "GET / HTTP/1.1" 200 93631 - "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
10.100.200.300 - dummy-user [30/Nov/2022:11:03:44 -0600] "GET / HTTP/1.1" 200 93631 - "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
External User(dummy-user) is Mapped to Temp User(dummy-user) with Role(s): role1 role2

server is creating log line like above, I have written grok pattern for standard access log but whenever external user string is coming it is getting rejected of course it is not in the pattern

Need help how I can match grok filter pipeline based on these two pattern

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.