Skip to content

Instantly share code, notes, and snippets.

@dploeger
Last active June 20, 2024 05:15
Show Gist options
  • Save dploeger/3aaa38a709aac6cea346112777e4083a to your computer and use it in GitHub Desktop.
Save dploeger/3aaa38a709aac6cea346112777e4083a to your computer and use it in GitHub Desktop.
Loki format expressions for common log formats
<source> - <user> [<timestamp>] "<method> <url> <type>" <status> <bytes>
<source> - <user> [<timestamp>] "<method> <url> <type>" <status> <bytes> "<referer>" "<agent>" <requestlength> 
(?P<source>[^ ]*) - (?P<user>[^ ]*) \[(?P<timestamp>[^\]]*)\] "(?P<method>[^ ]*) (?P<url>[^ ]*) (?P<type>[^ ]*) (?P<status>[^ ]*) (?P<bytes_sent>[^ ]*) "(?P<referer>[^"]*)" "(?P<user_agent>[^"]*)" (?P<request_length>[^ ]*) (?P<request_time>[^ ]*) \[(?P<proxy_upstream_name>[^\]]*)\] \[(?P<proxy_alternative_upstream_name>[^\]]*)\] (?P<upstream_addr>[^ ]*) (?P<upstream_response_length>[^ ]*) (?P<upstream_response_time>[^ ]*) (?P<upstream_status>[^ ]*) (?P<req_id>[^ ]*)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment