Stop on a specific character

Elastic Stack Logstash
1

hello guys,
i have a java log line "BusinessServiceImpl.java:7651)" and i want to stop just at the character ")" how can i do that with grok.

thanks in advance.

2 
grok { match => { "message" => "^(?<foo>[^\)]+)" } }

That is, from the beginning of line, any characters that are not ). That will stop capturing before the ).

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.