Thanks Badger, it worked:)
Also, can we apply the same json to the below format. I don't think it work for below log. I want to the below log data as separate columns.
Please help me out. Thanks in advance.
Original log message:
[08/Dec/2020:01:36:56 +0000] category=CORE severity=ERROR msgID=200 msg=Entry "uid=test123,ou=people,dc=taphill,dc=com" contains a value "USA" for attribute c that is invalid according to the syntax for that attribute: The provided value "USA" is not a valid country string because the length is not exactly two characters.
date: [08/Dec/2020:01:36:56 +0000] or 08/Dec/2020:01:36:56 +0000
category= CORE
severity=Error
msgID=200
msg=Entry "uid=test123,ou=people,dc=taphill,dc=com" contains a value "USA" for attribute c that is invalid according to the syntax for that attribute: The provided value "USA" is not a valid country string because the length is not exactly two characters
Thanks
Nick