Top "Logstash-grok" questions

Grok is an abstraction on top of regular expressions to allow easy parsing of unstructured text into structured and queryable form.

How to handle non-matching Logstash grok filters

I am wondering what the best approach to take with my Logstash Grok filters. I have some filters that are …

filter logstash logstash-grok
Is there any existing grok{} pattern for date format YYYY/MM/DD HH:mm:ss?

I was checking the nginx error logs at our server and found that they start with date formatted as: 2015/08/30 05:55:20 i.…

logstash logstash-grok
How to process multiline log entry with logstash filter?

Background: I have a custom generated log file that has the following pattern : [2014-03-02 17:34:20] - 127.0.0.1|ERROR| E:\xampp\htdocs\…

regex logstash multiline logstash-grok
Change default mapping of string to "not analyzed" in Elasticsearch

In my system, the insertion of data is always done through csv files via logstash. I never pre-define the mapping. …

elasticsearch logstash logstash-grok elasticsearch-mapping
Logstash Grok Filter Apache Access Log

I have been looking around here and there, but could not find the working resolution. I try to use Grok …

filter logstash logstash-grok
Logstash replace @timestamp with syslog date

I'm a bit confused. I'm trying to pull out the syslog date (backfilling the logstash) and replace the @timestamp with …

filter timestamp logstash syslog logstash-grok
How to parse json in logstash /grok from a text file line?

I have a logfile which looks like this ( simplified) Logline sample MyLine data={"firstname":"bob","lastname":"the builder"} I'd like …

elasticsearch logstash logstash-grok
Logstash reports [0] _grokparsefailure when parsing logs

I have logs that come in from that are in this format. I have assigned the logstash variable to the …

elasticsearch redis logstash kibana logstash-grok
GROK Parsing with regex

I am using the following regexes: INT (?:[+-]?(?:[0-9]+)) VALUE ([0-9]+) SPACE \s* DATA .*? USERNAME [a-zA-Z0-9._-]+ YEAR (?>\…

regex logstash logstash-grok
List of SYNTAX for logstash's grok

The syntax for a grok pattern is %{SYNTAX:SEMANTIC}. How do i generate a list of all available SYNTAX keywords ? …

logstash logstash-grok