Grok parser for my below stuff not working

HI Team,

I am trying to parse below line but seems this is not working. Can someone please help?

[2018-11-10 12:48:04] [2236] [http_80_tcp 3327] [192.168.1.2:53234] info: Request URL: http://192.168.1.39/test.doc

%{TIME:TIME}%{SPACE:SPACE}%{INT:port}

OK I managed to resovle it…

sharing might be helpful for others - thank you.

Oh sure, will share the parser.

Here was the parser

   %{TIME:TIME}\] \[%{INT:PID}\] \[%{WORD:PORT} %{WORD:IGNORE}\] \[%{IPV4:IP}:%{INT:SRCPORT}\] %{WORD:TYPE}: %{WORD:METHOD} %{WORD:RESOURCE}: %{URI:URL}

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.