Could someone help me write a grok filter for this log real quick here is
what the log looks like:
Aug 18 09:40:39 server01 webmin_log: 172.16.16.96 - username
*[18/Aug/2014:09:40:39
-0400]* "GET /right.cgi?open=system&open=status HTTP/1.1" 200 3228
here is what I have so far:
match => [ "message", "%{SYSLOGTIMESTAMP:timestamp} %{WORD:Server}
webmin_log: %{IP:IP_Address} - %{USERNAME:username} *[ stuck at this middle
part [18/Aug/2014:09:40:39 -0400] *] "%{WORD:method}
%{URIPATHPARAM:request} HTTP/1.1 %{NUMBER:bytes} %{NUMBER:duration}
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/4784c4b4-65ab-4894-8a1b-a8ab0fba0ed6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
