Please help me with grokparse for the following :
User@Host: db_usr_retaility[db_usr_retaility]
currently i'm using
match => { "message" => ["^# User@Host: %{USER:user}[[^]+]]"]}
but it says no match found in grok debugger
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.