2016-03-07 3 views
0

Я хочу извлечь журналы, содержащие сообщения ERROR вместе с меткой времени. Ниже приведен пример журнала, может ли кто-нибудь помочь мне с шаблонами grok?grok pattern для извлечения ошибок

26.02.2016 20:46:24.236 *ERROR* [000.000.0.000 [1456537583643] GET /content/client-name/secure/dashboard.html HTTP/1.1] org.apache.sling.servlets.get.impl.DefaultGetServlet No renderer for extension html, cannot render resource Paragraph, path=/content/client-name/secure/jcr:content/iparheader/mercerbbctopnavigati, type=client-uk/components/common/mercerBBCTopNavigation, cssClass=default, column=0/0, diffInfo=[null], resource=[JcrNodeResource, type=client-uk/components/common/mercerBBCTopNavigation, superType=null, path=/content/client-name/secure/jcr:content/iparheader/mercerbbctopnavigati] 
26.02.2016 20:46:24.237 *INFO* [000.000.0.000 [1456537583643] GET /content/client-name/secure/dashboard.html HTTP/1.1] com.client.uk.utilities.CommonUtil Attempting to fetch configurations. Entered getConfiguration() block 
26.02.2016 20:46:24.238 *INFO* [000.000.0.000 [1456537583643] GET /content/client-name/secure/dashboard.html HTTP/1.1] com.client.uk.taglibs.CommonTaglib linksList is[[Home, /content/client-name/secure/dashboard, , /content/dam/client/harmonise/logos/logo-client.png], [Health, /content/client-name/secure/health/health-summary, , /content/dam/client/harmonise/logos/logo-client.png], [Protection, /content/client-name/secure/life-sandbox], [Pension, /content/client-name/secure/pension-sandbox, , /content/dam/client/harmonise/logos/logo-client.png], [Finances, /content/client-name/secure/my-finance], [Articles & Videos, /content/client-name/secure/article-catalogue-page], [Profile, /content/client-name/secure/myprofile], [Help & Support, /content/client-name/secure/help-contact]] 
26.02.2016 20:46:24.244 *INFO* [000.000.0.000 [1456537583643] GET /content/client-name/secure/dashboard.html HTTP/1.1] com.client.uk.utilities.CommonUtil >> Entry CommonUtil.getEncrytedUrl 

ответ

0

матч => [ "сообщение", «% {TIMESTAMP_ISO8601: временная метка} [([^]] +?)]% {LOGLEVEL: тяжесть} (? ([^]] +))% { GREEDYDATA: message} "]

Смежные вопросы