Need help with trimming trail spaces

Elastic Stack Elasticsearch
1

Hi All, i have the following log pattern
[20/Sep/2018:16:20:49 -0400] 00.000.000.000 "GET /XXXXX-XXXXX-XXXX/health HTTP/1.1" 200 (1 ms) 0
I am using the following grok pattern
@parse
@type grok

[%{DATA:time}] %{IPV4:ipAddress} %{GREEDYDATA:syslog_message}"%{SPACE}%{GREEDYDATA:httpStatus:integer}(


But I am left with a trailing space for http status

"httpStatus": [
[
"200 "
]
]

Can someone please help

2

I think the pattern question got a bit mangled due to the formatting. Can you update the formatting so that grok pattern and/or input is rendered correctly ?

Also is this Logstash grok, or Ingest node grok ?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.