tomasdanjonsson/syslog2.grok

Created May 8, 2023 01:17

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/tomasdanjonsson/f8f1e213ab9ed3355039896279008c31.js"></script>
Save tomasdanjonsson/f8f1e213ab9ed3355039896279008c31 to your computer and use it in GitHub Desktop.

Download ZIP

Grok Expression for syslog2

Raw

syslog2.grok

%{SYSLOGTIMESTAMP:timestamp} %{HOSTNAME:host} %{WORD:process}\[%{NUMBER:pid}\]: %{GREEDYDATA:message}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment