regex - what is the regexp pattern for multiline (logstash) -
currently have:
multiline { type => "tomcat" pattern => "(^.+exception: .+)|(^\s+at .+)|(^\s+... \d+ more)|(^\s*caused by:.+)|(---)" => "previous" } and part of log:
tp-xxxxxxxxxxxxxxxxxxxxxxxx: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx @ xxxxxx caused by: xxxxxxxxx @ xxxxxx caused by: xxxxxxxxx --- error occurred in xxxxxxxxx. --- error occurred xxxxxxxxxx. my pattern doesn't work here. because added (---) @ end. right regexp add together --- lines?
thanks
you'll want business relationship other characters on line well:
(^---.*$) regex tomcat stack-trace multiline logstash
No comments:
Post a Comment