Hi everyone, I have an issue with Grok pattern on Graylog. Here is an log message I want to extract : 9999-01-07T23:12:43+02:00 9999 00.00.00.00 stm[9999]: <999999> <00.00.00.00 FF:FF:FF:FF:FF:FF> Dropping the radius packet for Station FF:FF:FF:FF:FF:FF FF:FF:FF:FF:FF:FF doing 802.1x I use Gr…

Hi, based on your log message: in your grok pattern i see <%{DATA:log_level}> but there’s no string match in your log message. remember to always quote special chars like “<” or “>” instead of [%{SPACE}] (and i didn’t see any “[” or “]” matching in message) use always (?:%{SPACE}) if you d…

Grok Pattern doesn't execute

Graylog Central (peer support)

system (system) Closed January 22, 2018, 9:48am 8

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
GROK Pattern fails to match Graylog Central (peer support)	2	1276	November 28, 2017
Grok pattern from documentation fails to match Graylog Central (peer support)	2	532	September 3, 2018
Grok Pattern ExtractorNot Extracting Graylog Central (peer support)	7	1111	March 14, 2019
Not able to use Grok pattern in Graylog but works in extractor Graylog Central (peer support) grok-patternspl	4	394	June 19, 2024
Grok Pattern Extractor Error Graylog Central (peer support)	5	1467	July 14, 2021

Grok Pattern doesn't execute

Related topics