TomonoriSoejima / Tejun

notes related to working cases
5 stars 3 forks source link

How to get started with grok with regex #12

Open TomonoriSoejima opened 4 years ago

TomonoriSoejima commented 4 years ago

random memo for how to get started with grok with regex.

https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html#_custom_patterns says

(?<field_name>the pattern here) is the basic form and here is the UI depicting it in action.

image

image

image

TomonoriSoejima commented 4 years ago

(?cs6=)(?.*$)