replace grok pattern with regex #2
Comments
1 task
naisanzaa
added a commit
that referenced
this issue
Jan 4, 2022
� This is the 1st commit message: 0.1.7 Change log: - update docstrings - update readme - minor fixes � The commit message #2 will be skipped: � 0.1.7 � � Change log: � � - update docstrings � - update readme � - minor fixes
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
e.g.
%{XXXXXXX:xxx}and replace with correct regex patternsample:
%{NUMBER:ts}\t%{NOTSPACE:uid}\t%{IP:orig_h}\t%{INT:orig_p}\t%{IP:resp_h}\t%{INT:resp_p}\t%{WORD:proto}\t%{GREEDYDATA:service}\t%{NUMBER:duration}\t%{NUMBER:orig_bytes}\t%{NUMBER:resp_bytes}\t%{GREEDYDATA:conn_state}\t%{GREEDYDATA:local_orig}\t%{GREEDYDATA:missed_bytes}\t%{GREEDYDATA:history}\t%{GREEDYDATA:orig_pkts}\t%{GREEDYDATA:orig_ip_bytes}\t%{GREEDYDATA:resp_pkts}\t%{GREEDYDATA:resp_ip_bytes}\t%{GREEDYDATA:tunnel_parents}The text was updated successfully, but these errors were encountered: