Hi
I have a input like
2018-12-12 10:34:51,357 [SocketAcceptorIoProcessor-1.0] INFO msg.incoming - FIX.4.4:xxxx->hhhh/hhhhfix: 8=FIX.4.4
where therest is in the form of Code=value\x01 delimited by \x1.
Now the problem is there is no order to code so it might come out as
34=sdsdf\x137=asasaas\x152=sdsdf\x1
or
52=sdsdf\x137=asasaas\x134=sdsdf\x1
so I built a
grok {
break_on_match => false
match => [ "message" => " %{GREEDYDATA:msg} "
#multi matchs for the different codes - but it not working !
match => [ "msg" => "(?<>code)"]
match => [ "msg" => "(?<>code)"]
match => [ "msg" => "(?<>code)"]
}