Fatal编程技术网
  • regex/
  • Regex grok匹配模式的通用正则表达式

Regex grok匹配模式的通用正则表达式

regex logstash

Regex grok匹配模式的通用正则表达式,regex,logstash,logstash-grok,logstash-configuration,Regex,Logstash,Logstash Grok,Logstash Configuration,我需要公共RE来表示以下值 Invoice_IID: 00000000-4164-1638-e168-ffff08d24460 Invoice_IID 00000000-4164-1638-e168-ffff08d24460 invoice iid 00000000-4164-1638-074f-ffff08d24461 <invoice iid="00000000-4164-1638-074f-ffff08d24461" <invoice iid=\"00000000-4164-1

我需要公共RE来表示以下值

Invoice_IID: 00000000-4164-1638-e168-ffff08d24460
Invoice_IID 00000000-4164-1638-e168-ffff08d24460
invoice iid 00000000-4164-1638-074f-ffff08d24461
<invoice iid="00000000-4164-1638-074f-ffff08d24461"
<invoice iid=\"00000000-4164-1638-074f-ffff08d24461\"
<parent_invoice iid="00000000-4164-1638-074f-ffff08d24461"
我需要对一个正则表达式中所有类型的内容的通用支持

是的，我获得了上述所有类型数据的解决方案

匹配模式为：

grok { 
  match => { "msg" => "[<]*[parent_]*[<]*[iI]no*voice[_,\" \"][iI][iI][dD][" "]*:?[" "]*=?[\\,\"]*%{UUID:InvoiceIID}[\",\\]*" } 
}

grok{
匹配=>{“msg”=>“[

grok { 
  match => { "msg" => "[<]*[parent_]*[<]*[iI]no*voice[_,\" \"][iI][iI][dD][" "]*:?[" "]*=?[\\,\"]*%{UUID:InvoiceIID}[\",\\]*" } 
}