Yelp / elastalert

Easy & Flexible Alerting With ElasticSearch
https://elastalert.readthedocs.org
Apache License 2.0
7.99k stars 1.73k forks source link

Tokenizing matched log messages by regex to extract information #3185

Open moritz91 opened 3 years ago

moritz91 commented 3 years ago

Currently, it seems it is only possible to print an entire log message to an email body. It would be great if a match for a regex would return the tokenized groups as here:

6f950180-b95f-11eb-9b45-661b6bda0c88

These should then be able to be referenced in the email body.

{log[3]} = group_3 = 296.... {log[5]} = group_5 = 301....