Added - to the clientip field of the S3_ACCESS_LOG pattern

logstash-plugins / logstash-patterns-core

Apache License 2.0

2.17k stars 979 forks source link

Added - to the clientip field of the S3_ACCESS_LOG pattern #249

Closed st1t closed 3 years ago

st1t commented 4 years ago

Hi, Sometimes clientip is -. So I want to add it to the format.

79a59df900b949e55d96a1e698fbacedfd6e09d98eacf8f8d5218e7cd47ef2be mybucket [11/Oct/2019:00:19:19 +0000] - AmazonS3 3E57427F33A59F07 S3.TRANSITION.OBJECT trail/2019-07-12-10-40-27-440Y0KJY21QW3IU9 "-" - - - 694 - - "-" "-" null

kares commented 3 years ago

the optional field was handled at #287 for a new set of captures that are ECS compliant