fluentd-docs
fluentd-docs copied to clipboard
multiline parser example for java logs matches wrong part with brackets
When the log message contains square brackets, the multiple parser example for java logs matches too much into the thread field, this should be like this:
format1 /^(?<time>\d{4}-\d{1,2}-\d{1,2} \d{1,2}:\d{1,2}:\d{1,2}) \[(?<thread>[^\]]*)\] (?<level>[^\s]+)(?<message>.*)/
the thread pattern should not allow a close square bracket