Hello everyone,
I need your help to parse with grok filter two information in two different variable with one filter.
The log line is as follows :
From: DNS_dns[2060]/15885
the first information is : DNS_dns and the second is 15885. Is that possible ?
I try this : match => {"message" => "From: %{WORD:Variable1"}
But it just parse me the first information.
Thank you for the help !