Skip to content
Snippets Groups Projects
Commit 8e302cc4 authored by Zuul's avatar Zuul Committed by Gerrit Code Review
Browse files

Merge "Improve grok pattern matching for apache logs"

parents 66853f86 63213c0e
No related branches found
No related tags found
No related merge requests found
......@@ -4,7 +4,7 @@
key_name Payload
<parse>
@type grok
grok_pattern \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:\d+|-)
grok_pattern \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) "%{DATA:referrer}" "%{DATA:agent}"
time_key Timestamp
time_format %d/%b/%Y:%H:%M:%S %z
keep_time_key true
......
---
features:
- |
Updates apache grok pattern to match the size of response in bytes,
time taken to serve the request and user agent.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment