Provided Grok expressions do not match field value

Elastic Stack Elasticsearch
1

Hi Team,

I installed 7.12.1 filebeat and enabled apache module but I'm getting "error.message Provided Grok expressions do not match field value".
I checked apache log format for my website.it seems like below;
LogFormat "%{X-Forwarded-For}i;%{X-Port}i;%h;%l;%u;%t;%r;%>s;%b;%D;%{Referer}i;%{User-Agent}i" combined_xff_delimited

The example log one line;
86.108.241.444;64409;172.21.181.4;-;-;[27/Jan/2023:14:58:18 +0300];GET /connect/generic/assets/fonts/typekit/museo-sans.woff2 HTTP/1.1;200;14912;46220;https://giris.com.tr/connect/generic/otp;Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148

How can I fix it? can you please advise.

Thanks
Emre

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.