One grok pattern for Messages,Secure ,cron and yum.log

Elastic Stack Logstash
1

Hello,

I would need some help in generating a grok pattern. I am trying to build a grok pattern for Messages,Secure ,cron and yum.log. Although we have a grok pattern for secure and messages file,but it says grok parse failure for yum.log and cron.

I want these these logs in single index only, so i want only one master grok pattern.

Can somebody please help me with this??

2

If you show us

  • what configuration you've put together so far and
  • examples of the kinds of log messages you want to parse

someone might be able to help you.

I want these these logs in single index only, so i want only one master grok pattern.

This statement doesn't make sense. You can have any number of grok patterns and still have the resulting events being sent to the same index.