mirror of
https://github.com/elastic/logstash.git
synced 2025-04-24 06:37:19 -04:00
ip is optional I guess, when missing, the [] is empty
This commit is contained in:
parent
aa4b98bb06
commit
c1da0258e0
1 changed files with 1 additions and 1 deletions
|
@ -19,7 +19,7 @@ describe "parse mysql slow query log" do
|
|||
grok {
|
||||
singles => true
|
||||
pattern => [
|
||||
"^# User@Host: %{USER:user}\[[^\]]+\] @ %{HOST:host} \[%{IP:ip}]",
|
||||
"^# User@Host: %{USER:user}\[[^\]]+\] @ %{HOST:host} \[%{IP:ip}?]",
|
||||
"^# Query_time: %{NUMBER:duration:float} \s*Lock_time: %{NUMBER:lock_wait:float} \s*Rows_sent: %{NUMBER:results:int} \s*Rows_examined: %{NUMBER:scanned:int}",
|
||||
"^SET timestamp=%{NUMBER:timestamp};"
|
||||
]
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue