Re: help with a grok filter

2014-08-18 Thread Kevin M
I dont see your post - what I am stuck with is whenever the date changes on that log example: *[18/Aug/2014:09:40:39 -0400]* *[20/Aug/2014:11:40:39 -0104]* *[19/Aug/2014:08:40:39 -0500]* the filter will not match it On Monday, August 18, 2014 1:53:37 PM UTC-4, vitaly wrote: > > > On Monday,

Re: help with a grok filter

2014-08-18 Thread vitaly
On Monday, August 18, 2014 9:57:41 AM UTC-4, Kevin M wrote: > > Could someone help me write a grok filter for this log real quick here is > what the log looks like: > > > Aug 18 09:40:39 server01 webmin_log: 172.16.16.96 - username > *[18/Aug/2014:09:40:39 > -0400]* "GET /right.cgi?open=system&

help with a grok filter

2014-08-18 Thread Kevin M
Could someone help me write a grok filter for this log real quick here is what the log looks like: Aug 18 09:40:39 server01 webmin_log: 172.16.16.96 - username *[18/Aug/2014:09:40:39 -0400]* "GET /right.cgi?open=system&open=status HTTP/1.1" 200 3228 here is what I have so far: match => [ "me