filtering in logstash

I have logs looking like this:

You might be better off extracting one line in each grok pattern. Use a pattern that matches zero-or-more characters that are not newline followed by a newline.

    grok { match => { message => "^Headers: (?<Headers>[^
" } }

Then you can give the grok filter an array of patterns to match.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.