Search code examples
datetomcatlogstashlogstash-grokcatalina.out

How to grok catalina log file

I'm trying to find a pattern for this line of log (extracted from catalina.log) of an apache tomcat 8 installation.

30-Apr-2019 15:40:40.044 INFOS [main] org.apache.catalina.startup.VersionLoggerListener.log message

No one of the date pattern include in logstash matches with this date format.

Do you have idea how can I parse this date 30-Apr-2019 15:40:40.044 to a timestamp in my logstash filter ?

Thanks

Solution

  • As stated by @baudsp, you may add the date pattern for catalina using a custom pattern file, or use it embedded in the grok, as shown here

    (?<date>%{MONTHDAY}-%{MONTH}-%{YEAR} %{HOUR}:?%{MINUTE}(?::?%{SECOND}))

    If you use the pattern often, put it in a file would probably be better, and provide more readability