各位大神，请教下logstash gork 正则过滤怎么对下面日志中 begintime endtime custselect这仨个字段分离出来，谢谢了！！！
08/05/2018 23:56:14:387 ERROR - 8EF333078184D7C433A975C736BC8096:/jj1027 : session id:mp-2018128155107-12 | ROTE171027:ParseROTE | logContent is | LogContent : begintime:2018-05-08 23:55:55 endtime:2018-05-08 23:56:14 custselect:1
08/05/2018 23:56:14:387 ERROR - 8EF333078184D7C433A975C736BC8096:/jj1027 : session id:mp-2018128155107-12 | ROTE171027:ParseROTE | logContent is | LogContent : begintime:2018-05-08 23:55:55 endtime:2018-05-08 23:56:14 custselect:1
2 个回复
Dm
赞同来自:
huangjiangong
赞同来自:
"time" level "data" lineno "filename"
"2018-05-11T10:26:24+08:00" info "Save Quantum data to S3" 77 "/usr/app/GoProjects/src/dataApi/apis/saicQuantum/thirdDataService.go"