Grok

A Grok pattern is a simplified, readable syntax built on top of regular expressions (regex), designed to extract structured data from unstructured text, but using a easier format that Regex.

We recommend use next Grok creation tool, which allows to generate patterns using non-structured strings defined by the user:

Parameter
Description

Field

Field where the text string to be parsed is located

Pattern

Grok Patterns to be applied on events from this integration. You can add as many patterns as you need, each on a separate line. The first pattern that works on the event will extract its information, and prevent the rest of the patterns from being applied.

Last updated