Need help with trimming trail spaces

(Kiranmayi) #1

Hi All, i have the following log pattern
[20/Sep/2018:16:20:49 -0400] "GET /XXXXX-XXXXX-XXXX/health HTTP/1.1" 200 (1 ms) 0
I am using the following grok pattern
@type grok

[%{DATA:time}] %{IPV4:ipAddress} %{GREEDYDATA:syslog_message}"%{SPACE}%{GREEDYDATA:httpStatus:integer}(

But I am left with a trailing space for http status

"httpStatus": [
"200 "

Can someone please help

(Jake Landis) #2

I think the pattern question got a bit mangled due to the formatting. Can you update the formatting so that grok pattern and/or input is rendered correctly ?

Also is this Logstash grok, or Ingest node grok ?

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.