From cd0e08e29de633a9cb75ef970e1baf49bac59ee7 Mon Sep 17 00:00:00 2001 From: MikeSchuette Date: Tue, 27 Nov 2012 11:55:20 -0600 Subject: [PATCH] Fix URIPARAM to allow square brackets PHP uses these all the time. --- patterns/grok-patterns | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patterns/grok-patterns b/patterns/grok-patterns index 48ca9813c..30cd34c0e 100755 --- a/patterns/grok-patterns +++ b/patterns/grok-patterns @@ -42,7 +42,7 @@ URIHOST %{IPORHOST}(?::%{POSINT:port})? # doesn't turn into %XX URIPATH (?:/[A-Za-z0-9$.+!*'(){},~:;=#%_-]*)+ #URIPARAM \?(?:[A-Za-z0-9]+(?:=(?:[^&]*))?(?:&(?:[A-Za-z0-9]+(?:=(?:[^&]*))?)?)*)? -URIPARAM \?[A-Za-z0-9$.+!*'|(){},~#%&/=:;_?-]* +URIPARAM \?[A-Za-z0-9$.+!*'|(){},~#%&/=:;_?-\[\]]* URIPATHPARAM %{URIPATH}(?:%{URIPARAM})? URI %{URIPROTO}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST})?(?:%{URIPATHPARAM})?