Grok Parser
Parse unstructured logs using Grok patterns. Match Apache, Nginx, syslog, and custom formats using powerful pattern expressions.
Grok Patterns#
Grok uses named patterns to extract fields from unstructured text:
%{IP:client} - - [%{HTTPDATE:timestamp}] "%{WORD:method} %{URIPATH:path}"
Built-in patterns: IP, HTTPDATE, WORD, NUMBER, GREEDYDATA, and more.
Create custom patterns or use the pattern library for common formats.
How to use
- Use patterns like TIMESTAMP_ISO8601, LOGLEVEL, GREEDYDATA