Simple GROK pattern not parsable

Elastic Stack Logstash
1

Its weird that GROK pattern is not parsing the string :

org.dozer.config.GlobalSettings.loadGlobalSettings

%{JAVACLASS:class}\.%{JAVAMETHOD:method}

I see compile error at https://grokdebug.herokuapp.com/. Please suggest.

2

org.dozer.config.GlobalSettings.loadGlobalSettings

%{WORD:1}.%{WORD:2}

    {
  "1": [
    [
      "org"
    ]
  ],
  "2": [
    [
      "dozer"
    ]
  ]
}
3

This is not what I am expecting. An output similar to what the below gives.

org.dozer.config.GlobalSettings.loadGlobalSettings
%{JAVACLASS:class}\.%{WORD:method}

But I think JAVAMETHOD should be the perfect fit but not sure why its not working. Can you see what I mean ?

4

I think this link could help you http://grokconstructor.appspot.com/do/construction

5

No the link I found is better. This link is quite generic and pattern matching can get quite specific. But my question remains same why %{JAVAMETHOD:method} is not working.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.