Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
175 views
in Technique[技术] by (71.8m points)

regex - Common regular expression for grok matching pattern

I need the common RE for representing the below values

Invoice_IID: 00000000-4164-1638-e168-ffff08d24460
Invoice_IID 00000000-4164-1638-e168-ffff08d24460
invoice iid 00000000-4164-1638-074f-ffff08d24461
<invoice iid="00000000-4164-1638-074f-ffff08d24461"
<invoice iid="00000000-4164-1638-074f-ffff08d24461"
<parent_invoice iid="00000000-4164-1638-074f-ffff08d24461"

I am trying with the below configuration with my grok debugger like

http://grokconstructor.appspot.com/do/match#result

grok { 
  match => { "msg" => "[iI]no*voice[_," "][iI][iI][dD]:? %{UUID:InvoiceIID}" } 
}

I need the common support for all types of content in one Regular Expression

See Question&Answers more detail:os

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

Yes, I got the solution for all above types of data.

matching pattern is:

grok { 
  match => { "msg" => "[<]*[parent_]*[<]*[iI]no*voice[_," "][iI][iI][dD][" "]*:?[" "]*=?[\,"]*%{UUID:InvoiceIID}[",\]*" } 
}

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...