Open ruey-cheng opened 1 year ago
Hi! i've encountered a similar issue. it may be related to grok-debugger not being able to handle nested fields [log][syslog][priority]
. The issue is similar to https://github.com/cjslack/grok-debugger/issues/8
see:
Grok Pattern![image](https://github.com/cjslack/grok-debugger/assets/79250984/7845ac03-3efd-4086-a468-20a9e477b81b)
%{SYSLOG5424PRI}
Samples<161>
But it works in kibana / Dev Tools / Grok Debugger![image](https://github.com/cjslack/grok-debugger/assets/79250984/717d3069-5377-44db-8fab-e1c57a0355b6)
Thanks for your help!