Logstash配置（官方文档）4-grok filter plugin

grok filter plugins

Plugin version（插件版本）: v4.2.0

Released on（发布于）: 2019-11-18

 

Description（描述）

Parse arbitrary text and structure it.

解析任意文本数据并结构化

Grok is a great way to parse unstructured log data into something structured and queryable.

grok是一个强大的方法，解析非结构化日志数据，转化成为一些结构化且可查询的。

This tool is perfect for syslog logs, apache and other webserver logs, mysql logs, and in general, any log format that is generally written for humans and not computer consumption.

这个工具完美支持syslog日志，apache和其他一些webserver日志，mysql日志，在多数情况下，通常为人类而不是计算机使用而编写的任何日志格式。

Logstash ships with about 120 patterns by default. You can find them here: https://github.com/logstash-plugins/logstash-patterns-core/tree/master/patterns. You can add your own trivially. (See the patterns_dir setting)

默认，logstash使用大约120个匹配方法输出内容。你可以在后