Unable to find Input, filter and grok pattern for logs starting with a session id

Elastic Stack Logstash
1

Hi Guys,
after several attempt i was trying to create a grok pattern for below kind of logs, where logs start with a session id, identifying different users. Need help to create a grok pattern.
Its a multi-line log, having different logs printed with different different session id for different users.

I tried using %{GREEDYDATA} , but not helping. Please suggest.

Below are the logs for 2 users with 2 session id.

562389e6d80ef45bda06cc7a7705 2016-11-18 11:02:01,118 http-thread-pool-9081(220) DEBUG [com.fundamo.web.controller.WebRootController] systemID for the request is MOA0001
562389e6d80ef45bda06cc7a7705 2016-11-18 11:02:01,126 http-thread-pool-9081(220) DEBUG [com.fundamo.web.controller.WebRootController] Multiple SystemId are present for Session Override
3dd0fed6ec8117a92a467c886b5b 2016-11-18 11:03:13,360 http-thread-pool-9081(10) INFO [com.fundamo.web.controller.FundamoSessionManager] Fundamo Session ID :3de6ead5a8f81f517cc714369255
3de6ead5a8f81f517cc714369255 2016-11-18 11:03:28,790 http-thread-pool-9081(19) DEBUG [com.fundamo.web.controller.WebRootController] systemID for the request is CUI0001

2

What pattern do you have so far?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.