Questions tagged [grok]

Grok is a web framework running atop of Zope application server written in Python with aim to make Zope technology more accessible to the masses as well as speed up the development process. Exploiting convention-over-configuration paradigm, Grok uses Zope Toolkit libraries and provides building blocks for your application along with the way to tie it all together.

Grok is a web framework running atop of Zope application server written in Python with aim to make Zope technology more accessible to the masses as well as speed up the development process.

Exploiting convention-over-configuration paradigm Grok uses Zope Toolkit libraries and provides building blocks for your application along with the way to tie it all together.

Visit grok to learn more.

486 questions
1
vote
2 answers

Grok filter is not working when id has dashes

I have a sample input like below. [2022-01-06 19:51:42,143] [http-nio-8080-exec-7] DEBUG [50a4f8740c30b9ca,c1b11682-1eeb-4538-b7f6-d0fb261b3e1d] I implemented a grok filter to validate the text. \[%{TIMESTAMP_ISO8601:timestamp}\]…
prime
  • 769
  • 1
  • 13
  • 27
1
vote
1 answer

Need to exclude few words from logs using grok

Consider the below string date 00:00 1.1.1.1 POST test.com hello-world How could I print only the date totaltime and URL(test.com) using grok?
Ajay
  • 55
  • 7
1
vote
1 answer

how can i solve the problem problem with this regex?

what is the problem with this regex? PUBLIC_API_REQUEST:http://localhost:6501/public/api/v1/getBranches/client/faraApp {some text here} PUBLIC_API_RESPONSE:{some text here} myregex :PUBLIC_API_REQUEST:(?
(?:[A-z\:\-\0-9\/]+))…
Ali farahzadi
  • 274
  • 2
  • 10
1
vote
0 answers

Datadog Grok Parsing - extracting fields from list of JSON

I want to extract fields from list of json [ { "ExecMainStartTimestamp": "Wed 2021-10-27 11:31:36 UTC", "hostname": "i-XX", "_time": "2021-10-27 12:20:01", "ASG": "prod1", "ExecMainPID": "1447", "Names": "nginx.service", …
1
vote
1 answer

Parsing Custom Logs Format Using Grok

I have some costum log files I would like to parse so I can feed them in logstash. I built a grok pattern to parse them but admitedly I'm not very proficient in grock nor regex, I wanted to ask if what I did could somehow be…
Benou
  • 11
  • 1
1
vote
1 answer

grok script for writing to logstash and rendering in Kibana

I am following filebeat->logstash->elasticsearch->kibana pipeline. filebeat successfully working and fetching the logs from the target file. Logstash receiving the logs on input plugin and bypassing the filter plugin and sending over to the output…
1
vote
1 answer

How to skip the beginning of a message with Grok Patterns?

I am trying to extract only the last part of a Linux log using Grok Patterns in Graylog, but it's harder than I tought. Here's the message that I receive: Mar 18 11:10:01 graylog CRON[14637]: pam_unix(cron:session): session closed for user root I…
Lorenzo
  • 180
  • 8
1
vote
2 answers

Regex match not always present elements

I have these inputs: +36919:60546a74:0|POST /api/v1/transactions -36919:60546a74:0 I am looking for a regex (or a grok pattern) to give me these outputs: For the first line: in_out: + id: 36919:60546a74:0 method: POST url: /api/v1/transactions For…
Karim
  • 187
  • 10
1
vote
1 answer

Grok pattern not found match

I'm trying to parse the below log entry for Elasticsearch using grok pattern. Example entry log for parsing: [AD Thread Pool-Global0] 09 Mar 2021 05:45:29,704 ERROR NetVizAgentRequest - Fatal transport error while connecting to URL…
Alex_kl
  • 11
  • 1
1
vote
1 answer

elastic search grok filter

I'v just started to work with ELK and logstash I want to parse my apache custom log I wrote simple logstash pipeline input { beats { port => 5044 } filter { grok { match => { "message" => "%{COMBINEDAPACHELOG}" } } } output { …
supportth
  • 29
  • 4
1
vote
0 answers

Kibana grok formating of date timestamp

I am trying to format the datetimestamp in the following log to produce output of: 2021-02-04 14:29:42.248281 Following is what I have tried so far. Sample log: E0204 14:29:42.248281 1…
Alex Leong
  • 11
  • 1
1
vote
1 answer

Celery-Django weblogs Grok Pattern

I'm trying to get the grok pattern for the following web log line: [2020-12-14 10:44:57,598: INFO/ForkPoolWorker-1] Task celery.chord_unlock[1f93d444-835f-4ff4-b730-915b0f17f9ab] retry: Retry in 1s and this is the pattern I've…
Tshepi
  • 13
  • 3
1
vote
1 answer

Use fluent-plugin-grok-parser with splunk-hec image

I am trying to create an image that has grok-parser installed based on the fluentd-hec image. This is the Dockerfile i'm using: FROM splunk/fluentd-hec:1.2.4 USER root RUN gem install fluent-plugin-grok-parser RUN chown -R fluent:fluent…
Steve
  • 175
  • 1
  • 3
  • 13
1
vote
1 answer

Telegraf parsing “grok” patterns out to prometheus

I have been trying to ingest data into influx from a log file. The structure is as follows 2020-12-20 09:03:33.867 [http-nio-8080-exec-1] [] INFO FCPROCESS_WEB_DIGEST - (process.IndexController.index,/api/index,Y,0ms), I have used this…
kongda
  • 11
  • 1
1
vote
1 answer

AttributeError: 'NoneType' object has no attribute 'split' in python when I rune my code

from microbit import * import radio radio.on() radio.config(channel=8) routing_table = { 'Alice': 8, 'Bob': 10, 'Charlie': 15 } spy = 60 def forward_message(msg): source, destination, payload = msg.split(':') radio.config(channel=10) …
Muhammad MOAZ
  • 11
  • 1
  • 3