The Gork application tokenizes the key values present in the logs with the key values defined in the GROK library.
Release Details
|
Fields |
Details |
|---|---|
|
Name |
Grok |
|
Version |
3.0.1 |
|
Supported On |
LogPoint v6.3.0 and later |
|
Release Date |
2018-07-30 |
| Document Date | 2018-07-30 |
| Download | Grok_3.0.1.pak |
| SHA256 | 8c249c9898ff618729af26c8a84354bf68308437f0a1d050708334898f2be268 |
Bug Fix
Previously, if any of the events did not match the pattern of the grok process command, the search was not terminated. This has been fixed.
Usage Information
Syntax: | process grok("pattern")
For example, "| process grok("%{WORD:action} by %{WORD:user} from %{IP:source_address}")" query tokenizes the log message as per the provided pattern and creates the action, user and source_address fields.
Sample Log
Installation
Follow these steps to install the Grok Process Plugin v3.0.1:
- Download the Grok Process Plugin package provided above in the Download section.
- Install the package by importing the pak file to LogPoint under Settings >> System >> Applications
Release Details
|
Fields |
Details |
|---|---|
|
Name |
Grok |
|
Version |
3.0.1 |
|
Supported On |
LogPoint v6.0.0 and later |
|
Release Date |
2018-05-30 |
| Document Date | 2018-05-30 |
| Download | Grok_3.0.1.pak |
| SHA256 | 8c249c9898ff618729af26c8a84354bf68308437f0a1d050708334898f2be268 |
Bug Fix
Previously, if any of the events did not match the pattern of the grok process command, the search was not terminated. This has been fixed.
Usage Information
Syntax: | process grok("pattern")
For example, "| process grok("%{WORD:action} by %{WORD:user} from %{IP:source_address}")" query tokenizes the log message as per the provided pattern and creates the action, user and source_address fields.
Sample Log
Installation
Follow these steps to install the Grok Process Plugin v3.0.1:
- Download the Grok Process Plugin package provided above in the Download section.
- Install the package by importing the pak file to LogPoint under Settings >> System >> Applications
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Article is closed for comments.