Skip to content

Instantly share code, notes, and snippets.

@holgr
Created July 30, 2014 23:22
Show Gist options
  • Save holgr/ac60d36a120f1d3d8c47 to your computer and use it in GitHub Desktop.
Save holgr/ac60d36a120f1d3d8c47 to your computer and use it in GitHub Desktop.
Apache error_log grokker for logstash
Sample:
[Tue Jul 29 21:25:13.611048 2014] [autoindex:error] [pid 30079] [client 172.16.58.1:52553] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
Pattern:
\[(?<timestamp>%{DAY:day} %{MONTH:month} %{MONTHDAY} %{TIME} %{YEAR})\] \[%{WORD:module}:%{WORD:errorlevel}\] \[pid %{POSINT:pid}\] \[client %{IPORHOST:http_clientip}:%{POSINT:clientport}\] %{GREEDYDATA:message_remainder}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment