Maybe you could also try the character class whitespace (\s), which should
work in general.
On Tuesday, July 5, 2016 at 6:33:23 AM UTC+2, Zoizo wrote:
>
> Okay I found the solution.
>
> For some reason, the space after "Nom du compte is a non breaking space.
> So I used alt 0160 to put a non-bre
Okay I found the solution.
For some reason, the space after "Nom du compte is a non breaking space. So
I used alt 0160 to put a non-breaking space here. It works now.
Thanks a lot anyway Kaiser, greatly appreciated ^^
On Tuesday, July 5, 2016 at 8:28:21 AM UTC+4, Zoizo wrote:
>
> Hello,
>
> Eve
Hello,
Even with the (?mi) addition, it's not working. I wonder if some characters
are wrong in the log, like maybe some spaces are not spaces in reality
(though it would be weird that they are spaces when c/ced).
Because, for example (Nom du compte) returns Nom du compte, but (Nom du
compte )
I'm on 2.0.x, not sure about the full version, I will check tomorrow, but
it should be the last since I did everything (install, architecture etc)
last week, with latest rpm.
Input is syslog tcp.
I will try again tomorrow, thanks again.
On Mon, Jul 4, 2016 at 7:03 PM, kaiser wrote:
> My test
My test was done on my graylog test server.
Which graylog version do you have?
Which kind of input did you use? Gelf (in that case maybe the (?mi) could
solve the issue) ?
I have made the test with graylog 2.0.3
If it still doesn't work you should try the grok pattern
--
You received th
Thank you for your time mate.
Hmm well it might have worked in a tester (it that's where you tested it)
but in the graylog interface it didn't for me.
Nevertheless,I will try again with your version tomorrow at work and keep
the thread updated.
Thanks.
On Monday, July 4, 2016 at 6:33:01 PM U
Your regex is ok.
Worked for me.
You can otherwise try:
(?mi)Nom du compte : ([a-zA-Z0-9.-]{1,50})
And for the second one you just need to capture Compte cible :D:
(?mi)Compte cible : .*Nom du compte : ([a-zA-Z0-9.-]{1,50})
@peluche
Le lundi 4 juillet 2016 11:52:03 UTC+2, Zoizo a écrit :
