Top "Logstash-grok" questions

Grok is an abstraction on top of regular expressions to allow easy parsing of unstructured text into structured and queryable form.

Logstash Grok pattern with double quotes

I am parsing proxy logs with Logstash and its Grok filter. The logs contain quoted strings : 1438120705 [.....] "SEF-EDP8" - "C" "/GPM/1023/5745…

regex elasticsearch logstash logstash-grok
Multiple patterns in one log

So I wrote now several patterns for logs which are working. The thing is now, that I have these multiple …

logstash logstash-grok
conditional matching with grok for logstash

I have php log of this format [Day Mon DD HH:MM:SS YYYY] [Log-Type] [client <ipv4 ip address&…

logstash logstash-grok
Converting date format to YYYY-MM-DD from YYYY/MM/DD HH:MM:SS format in Logstash for nginx error logs

I am having nginx error logs of the below form:- 2015/09/30 22:19:38 [error] 32317#0: *23 [lua] responses.lua:61: handler(): Cassandra error: Error during …

logstash logstash-grok logstash-configuration
using Grok to skip parts of message or logs

I have just started using grok for logstash and I am trying to parse my log file using grok filter. …

logstash logstash-grok
Grok pattern for data separated by pipe

I have a logfile in which the data is separated by a pipe symbol. "|". An example is below. Does anyone …

logstash logstash-grok
Use grok to add the log filename as a field in logstash

I'm using Grok & Logstash to send access logs from Nginx to Elastic search. I'm giving Logstash all my access …

regex logstash logstash-grok
logstash: multiple logfiles with different pattern

We want to set up a server for logstash for a couple of different project in our company. Now I …

filter logstash kibana logstash-grok logfiles
Drop log line containing hash character

In my Logstash shipper I want to filter out lines commented with the hash character: #This log row should be …

regex logging logstash logstash-grok
logstash grok - how to do conditional pattern matching?

I have these three log lines in the same log file: INFO [2015-08-27 18:46:14,279] ({qtp243745864-44} NotebookServer.java[onMessage]:101) - …

regex logstash logstash-grok