Thursday, 15 September 2011

regex - what is the regexp pattern for multiline (logstash) -



regex - what is the regexp pattern for multiline (logstash) -

currently have:

multiline { type => "tomcat" pattern => "(^.+exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*caused by:.+)|(---)" => "previous" }

and part of log:

tp-xxxxxxxxxxxxxxxxxxxxxxxx: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx @ xxxxxx caused by: xxxxxxxxx @ xxxxxx caused by: xxxxxxxxx --- error occurred in xxxxxxxxx. --- error occurred xxxxxxxxxx.

my pattern doesn't work here. because added (---) @ end. right regexp add together --- lines?

thanks

you'll want business relationship other characters on line well:

(^---.*$)

regex tomcat stack-trace multiline logstash

No comments:

Post a Comment