We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
My log pipeline is not processing named captures.
Log line: 2024-05-14 13:09:25,791 DEBUG [[ACTIVE] ExecuteThread: '8' for queue: 'weblogic.kernel.Default (self-tuning)'] [] (c.t.i.d.w.CommonDelegate:304) - Received request is:s
2024-05-14 13:09:25,791 DEBUG [[ACTIVE] ExecuteThread: '8' for queue: 'weblogic.kernel.Default (self-tuning)'] [] (c.t.i.d.w.CommonDelegate:304) - Received request is:s
With this one, I cannot see attributes.message: ^(?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
attributes.message
^(?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
With this grok capture, I can see attributes.message: ^(%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
^(%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
But using https://grokdebugger.com/ I can see it with both.
The text was updated successfully, but these errors were encountered:
Thanks for opening this issue. A team member should give feedback soon. In the meantime, feel free to check out the contributing guidelines.
Sorry, something went wrong.
No branches or pull requests
Bug description
My log pipeline is not processing named captures.
Expected behavior
Log line:
2024-05-14 13:09:25,791 DEBUG [[ACTIVE] ExecuteThread: '8' for queue: 'weblogic.kernel.Default (self-tuning)'] [] (c.t.i.d.w.CommonDelegate:304) - Received request is:s
With this one, I cannot see
attributes.message
:^(?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
With this grok capture, I can see
attributes.message
:^(%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND})\s+%{GREEDYDATA:message}
But using https://grokdebugger.com/ I can see it with both.
How to reproduce
Version information
Additional context
Thank you for your bug report – we love squashing them!
The text was updated successfully, but these errors were encountered: