simple-logstash-elk-grok.txt

simple-logstash-elk-grok.txt

54.xx.xxx.xxx - - [07/May/2020:13:18:12 +0000] "GET / HTTP/1.1" 200 9877 "-" "kube-probe/1.16"

%{IP:ip} \- \- \[%{NUMBER:day}/%{DATA:month}/%{NUMBER:year}:%{DATA:time} +%{NUMBER:offset}\] "%{WORD:method} %{URIPATH:path} %{DATA:protocol}" %{NUMBER:status} %{NUMBER:size} %{QS:dash3} %{QS:browser}
{
  "offset": "+0000",
  "method": "GET",
  "year": "2020",
  "ip": "54.xx.xxx.xxx",
  "dash3": "\"-\"",
  "path": "/",
  "protocol": "HTTP/1.1",
  "month": "May",
  "size": "9877",
  "browser": "\"kube-probe/1.16\"",
  "time": "13:18:12",
  "day": "07",
  "status": "200"
}

%{GREEDYDATA:rest}