Hi, I am trying to create a Grok pattern for a syslog: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: admin] [Source: 1.1.1.1] [localport: 22] at 08:51:08 UTC Wed Jun 5 2024 and my grok pattern is below: Login Success [user: %{USERNAME:User}] [Source: %{IPV4:Ipv4Address}] [localport: %{NUMBER:P…

Never mind, I have got the solution here: [image] Grok Parse in Pipeline (bug or invalid escapes?) Graylog Central (peer support) Hey all, Just found this. Trying to parse a few URIPATHs (field is URI_path) that look like this: section=bottom&templateUrl=https://www.dom…

Not able to use Grok pattern in Graylog but works in extractor

Graylog Central (peer support)

ihe June 5, 2024, 11:50am 2

Hi,
please also post your rule from the pipeline to find the error.

Topic		Replies	Views
Grok Pattern in Pipelines Graylog Central (peer support)	5	228	October 17, 2024
GROK Pattern fails to match Graylog Central (peer support)	2	1276	November 28, 2017
Solved: Problem with pipeline rule and grok pattern Graylog Central (peer support) pipeline-rules	6	3095	August 25, 2019
Pipllines and the grok-function Graylog Central (peer support) pipeline-rules , grok-patternspl	4	4608	February 2, 2022
Need help with extractor grok pattern Graylog Tech Challenges pipeline-rules	6	1473	May 24, 2022

Not able to use Grok pattern in Graylog but works in extractor

Related topics