fluentd-docs icon indicating copy to clipboard operation
fluentd-docs copied to clipboard

multiline parser example for java logs matches wrong part with brackets

Open alexlehm opened this issue 5 years ago • 0 comments

When the log message contains square brackets, the multiple parser example for java logs matches too much into the thread field, this should be like this:

format1 /^(?<time>\d{4}-\d{1,2}-\d{1,2} \d{1,2}:\d{1,2}:\d{1,2}) \[(?<thread>[^\]]*)\] (?<level>[^\s]+)(?<message>.*)/

the thread pattern should not allow a close square bracket

alexlehm avatar May 03 '19 13:05 alexlehm