Last active
January 9, 2019 06:45
-
-
Save juffaz/e8ad0afa61ffa1b5c267076915115d0a to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
regular exp for "08-Jan-2019 17:42:25.431" tomcat log | |
^[0-9]{1,2}-[A-Z,a-z]{3}-[0-9]{4}\s[0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2}[.][0-9]{3} | |
enable multiline - yes, Multiline pattern is negated = yes | |
multiline.negate: true | |
multiline.match: after | |
regular exp for space(...) and "Caused by" tomcat log | |
multiline.pattern: '^[[:space:]]+(at|\.{3})\b|^Caused by:' | |
enable multiline - yes | |
multiline.negate: false | |
multiline.match: after | |
check syntax https://www.freeformatter.com/regex-tester.html | |
https://www.elastic.co/guide/en/logstash/6.2/multiline.html | |
https://www.elastic.co/guide/en/beats/filebeat/master/_examples_of_multiline_configuration.html |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment