Skip to content

Instantly share code, notes, and snippets.

@juffaz
Last active January 9, 2019 06:45
Show Gist options
  • Save juffaz/e8ad0afa61ffa1b5c267076915115d0a to your computer and use it in GitHub Desktop.
Save juffaz/e8ad0afa61ffa1b5c267076915115d0a to your computer and use it in GitHub Desktop.
regular exp for "08-Jan-2019 17:42:25.431" tomcat log
^[0-9]{1,2}-[A-Z,a-z]{3}-[0-9]{4}\s[0-9]{1,2}:[0-9]{1,2}:[0-9]{1,2}[.][0-9]{3}
enable multiline - yes, Multiline pattern is negated = yes
multiline.negate: true
multiline.match: after
regular exp for space(...) and "Caused by" tomcat log
multiline.pattern: '^[[:space:]]+(at|\.{3})\b|^Caused by:'
enable multiline - yes
multiline.negate: false
multiline.match: after
check syntax https://www.freeformatter.com/regex-tester.html
https://www.elastic.co/guide/en/logstash/6.2/multiline.html
https://www.elastic.co/guide/en/beats/filebeat/master/_examples_of_multiline_configuration.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment