kibna grok pattern example

log

Aug  7 08:11:25 manager-1 jmx_exporter: level=info ts=2019-08-07T08:11:25.490066117Z caller=main.go:226 msg="Loaded config file"

pattern

%{
     SYSLOGTIMESTAMP:systime}\s+%{
     SYSLOGHOST:host}\s+%{
     PROG:service}:\s+level=(?<level>\w+)\s+ts=%{
     TIMESTAMP_ISO8601:timestamp}\s+caller=(?<thread>[\w+.:\d]+)%{
     GREEDYDATA:message}

log

Cassandra_au_log 2020-08-13 02:29:24.635-> client=10.120.113.126, user=anonymous, status=ATTEMPT, operation='SELECT * FROM system_schema.views'

pattern

%{
     PROG:service}\s+%{
     TIMESTAMP_ISO8601:logdate}->\s+client=%{
     IP:client},\suser=%{
     PROG:user},\sstatus=%{
     PROG:status},\soperation=%{
     GREEDYDATA:operation}