Stop on a specific character

hello guys,
i have a java log line "" and i want to stop just at the character ")" how can i do that with grok.

thanks in advance.

grok { match => { "message" => "^(?<foo>[^\)]+)" } }

That is, from the beginning of line, any characters that are not ). That will stop capturing before the ).

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.