Blason
(R)
November 15, 2019, 12:46pm
1
Hi Folks,
Somehow I am not able to parse the below Text in grok. grokdebug is consistently showing no match.
{"org_name": "google.com", "org_email": "abuse-support@google.com", }
Here are my parser which are pretty basic
\{\"%{WORD:method}\"\:\s*\"%{WORD:orig}\"\,
B.M
(Badre)
November 15, 2019, 1:26pm
2
Hi,
Here's a grok pattern that works
%{DATA}\s*:\s*%{DATA:org_name},\s*\s*%{DATA}\s*:\s*\s*%{DATA:org_email},
This is the result that i've got
{
"org_email": ""abuse-support@google.com"",
"org_name": ""google.com""
}
system
(system)
Closed
December 13, 2019, 1:26pm
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.