What is Greedydata

Srikanth_FT · March 1, 2018, 1:43pm

Hi,

Can someone explain me what is greedydata.

Best
Mudireddy

rcowart · March 1, 2018, 2:33pm

I assume you are talking about grok patterns. You can find the definitions for all of the built-in patterns here...

logstash-plugins/logstash-patterns-core/blob/master/patterns/grok-patterns

USERNAME [a-zA-Z0-9._-]+
USER %{USERNAME}
EMAILLOCALPART [a-zA-Z][a-zA-Z0-9_.+-=:]+
EMAILADDRESS %{EMAILLOCALPART}@%{HOSTNAME}
INT (?:[+-]?(?:[0-9]+))
BASE10NUM (?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))
NUMBER (?:%{BASE10NUM})
BASE16NUM (?<![0-9A-Fa-f])(?:[+-]?(?:0x)?(?:[0-9A-Fa-f]+))
BASE16FLOAT \b(?<![0-9A-Fa-f.])(?:[+-]?(?:0x)?(?:(?:[0-9A-Fa-f]+(?:\.[0-9A-Fa-f]*)?)|(?:\.[0-9A-Fa-f]+)))\b

POSINT \b(?:[1-9][0-9]*)\b
NONNEGINT \b(?:[0-9]+)\b
WORD \b\w+\b
NOTSPACE \S+
SPACE \s*
DATA .*?
GREEDYDATA .*
QUOTEDSTRING (?>(?<!\\)(?>"(?>\\.|[^\\"]+)+"|""|(?>'(?>\\.|[^\\']+)+')|''|(?>`(?>\\.|[^\\`]+)+`)|``))
UUID [A-Fa-f0-9]{8}-(?:[A-Fa-f0-9]{4}-){3}[A-Fa-f0-9]{12}
# URN, allowing use of RFC 2141 section 2.3 reserved characters

This file has been truncated. show original

As you will find there, GREEDYDATA is .*

Topic		Replies	Views
Logstash basic grok field types description Logstash	2	18498	December 28, 2017
Grok is not parsing GREEDYDATA field Logstash	6	8307	July 6, 2017
Grok pattern from within kibana dev tools Kibana	5	997	November 9, 2017
Logstash Grok pattern GREEDYDATA does not match Logstash	5	1293	December 26, 2018
[SOLVED] Grok and Greedydata regex Logstash	9	8206	February 13, 2017

What is Greedydata

Related topics