I dont see your post - what I am stuck with is whenever the date changes on
that log example:
*[18/Aug/2014:09:40:39 -0400]*
*[20/Aug/2014:11:40:39 -0104]*
*[19/Aug/2014:08:40:39 -0500]*
the filter will not match it
On Monday, August 18, 2014 1:53:37 PM UTC-4, vitaly wrote:
>
>
> On Monday,
On Monday, August 18, 2014 9:57:41 AM UTC-4, Kevin M wrote:
>
> Could someone help me write a grok filter for this log real quick here is
> what the log looks like:
>
>
> Aug 18 09:40:39 server01 webmin_log: 172.16.16.96 - username
> *[18/Aug/2014:09:40:39
> -0400]* "GET /right.cgi?open=system&
Could someone help me write a grok filter for this log real quick here is
what the log looks like:
Aug 18 09:40:39 server01 webmin_log: 172.16.16.96 - username
*[18/Aug/2014:09:40:39
-0400]* "GET /right.cgi?open=system&open=status HTTP/1.1" 200 3228
here is what I have so far:
match => [ "me