logstash-plugins/logstash-patterns-core issues and pull requests

#324 - Update SYSLOG5224BASE for ECS 8.2

Pull Request - State: open - Opened by fgierlinger over 1 year ago

#323 - HTTPDUSER pattern does not match for empty user for standard apache log, generates grokparsefailure

Issue - State: open - Opened by rsommer over 1 year ago
Labels: bug

#322 - CISCOFW106006_106007_106010 not matching

Issue - State: open - Opened by anubisg1 over 1 year ago - 1 comment
Labels: bug

#321 - Add a new pattern TIMESTAMP_CN

Pull Request - State: open - Opened by waitspring almost 2 years ago - 1 comment

#320 - Add a new pattern TIMESTAMP_CN

Pull Request - State: closed - Opened by waitspring almost 2 years ago - 1 comment

#319 - Add a new pattern into grok for Chinese style timestamp

Issue - State: open - Opened by waitspring almost 2 years ago - 2 comments

#318 - fixed IPTABLES pattern

Pull Request - State: open - Opened by jdelker about 2 years ago - 1 comment

#317 - Fix S3_ACCESS_LOG pattern for S3 lifecycle events

Pull Request - State: open - Opened by penekk about 2 years ago - 1 comment

#316 - grok pattern IPTABLES does not always match

Issue - State: open - Opened by jdelker about 2 years ago - 3 comments
Labels: bug

#315 - patterns/{ecs-v1,legacy}/grok-patterns: SYSLOGFACILITY pattern is misleading

Issue - State: open - Opened by efd6 about 2 years ago - 1 comment
Labels: bug

#314 - new Grok Pattern to match multiline strings, e.g. Stacktraces

Issue - State: open - Opened by stoerr about 2 years ago
Labels: enhancement

#313 - fix CISCOFW302013_302014_302015_302016 grok pattern

Pull Request - State: closed - Opened by leandrojmp over 2 years ago - 3 comments

#312 - Typo in logstash-patterns-core/patterns/ecs-v1/firewalls

Issue - State: closed - Opened by ThomSwiss over 2 years ago - 1 comment
Labels: bug

#311 - Fix: parsing x-edge-location in CLOUDFRONT_ACCESS_LOG

Pull Request - State: closed - Opened by kares over 2 years ago

#310 - Test: fix and add ECS compatibility specs

Pull Request - State: closed - Opened by kares over 2 years ago

#309 - grok patterns for firewall checkpoint helpme!

Issue - State: closed - Opened by dcantos1 almost 3 years ago - 1 comment
Labels: help wanted

#308 - Scope ID in IPv6

Issue - State: open - Opened by Fondaz almost 3 years ago
Labels: enhancement

#307 - Fix: typo in BIN9_QUERYLOG pattern (in ECS mode)

Pull Request - State: closed - Opened by camAtGitHub about 3 years ago

#306 - CLOUDFRONT_ACCESS_LOG pattern fails to match CloudFront logs

Issue - State: closed - Opened by pa-jberanek about 3 years ago - 3 comments
Labels: bug

#305 - Fix broken link on readme.

Pull Request - State: closed - Opened by garnertb over 3 years ago - 1 comment

#304 - Event created using CISCO_TAGGED_SYSLOG fails date_time_parse_exception

Issue - State: closed - Opened by farrp over 3 years ago - 2 comments
Labels: wontfix

#303 - Fix: incorrect syslog (priority) field name

Pull Request - State: closed - Opened by kares over 3 years ago

#302 - Build: revert the need to use a git source

Pull Request - State: closed - Opened by kares over 3 years ago

#301 - Can you help me to write grok pattern for this log, please?

Issue - State: open - Opened by sirio771 over 3 years ago
Labels: help wanted

#300 - Comma separated IP regex is handy for http-x-forwarded-for for instance

Pull Request - State: closed - Opened by leventyalcin over 3 years ago - 5 comments

#299 - Fix: HTTPD_ERRORLOG should match when module missing

Pull Request - State: closed - Opened by kares over 3 years ago

#298 - Fix: allow to parse SQUID log with status 0 + handle optional server address

Pull Request - State: closed - Opened by kares over 3 years ago - 1 comment

#297 - Feat: fully ECS compliant captures

Pull Request - State: closed - Opened by kares almost 4 years ago

#296 - Feat: make firewall patterns ECS compliant (2/2)

Pull Request - State: closed - Opened by kares almost 4 years ago - 1 comment

#295 - Feat: make BACULA_LOGLINE captures ECS compliant

Pull Request - State: closed - Opened by kares almost 4 years ago - 1 comment

#294 - Feat: ECS compliant Juniper (SRX) RT_FLOW captures

Pull Request - State: closed - Opened by kares almost 4 years ago - 1 comment

#291 - Feat: allow UNIXPATH to match non-ascii chars

Pull Request - State: closed - Opened by kares almost 4 years ago

#290 - Feat: ecs-ify EXIM captures

Pull Request - State: closed - Opened by kares almost 4 years ago - 1 comment

#289 - Feat: make Haproxy captures ECS compliant

Pull Request - State: closed - Opened by kares almost 4 years ago - 2 comments

#288 - Added additional Cisco-fw rules to log admin commands

Pull Request - State: open - Opened by Fabian1976 almost 4 years ago
Labels: needs tests

#284 - Update postgresql

Pull Request - State: closed - Opened by patsevanton about 4 years ago - 2 comments
Labels: needs tests

#278 - Implement ECS-Compatibility Mode

Issue - State: closed - Opened by kares about 4 years ago

#277 - Pattern for Citrix ADC

Pull Request - State: open - Opened by jantytgat about 4 years ago - 4 comments
Labels: patttern-request

#273 - Fix: e-mail address's local part to match according to RFC

Pull Request - State: closed - Opened by kares about 4 years ago - 1 comment

#268 - Feat: make java patterns match in an ecs compatible way

Pull Request - State: closed - Opened by kares about 4 years ago - 3 comments

#260 - add HAPROXYERROR pattern to parse error lines.

Pull Request - State: closed - Opened by leandrojmp over 4 years ago - 2 comments
Labels: patttern-request, needs tests

#259 - HTTPD24_ERRORLOG fails if module not present

Issue - State: open - Opened by jordi-domingo over 4 years ago
Labels: bug

#258 - Field agent collides with filebeat agent field in grok COMBINEDAPACHELOG pattern

Issue - State: closed - Opened by d3vnick over 4 years ago

#257 - Introducing alb logs pattern

Pull Request - State: open - Opened by vinayakg over 4 years ago
Labels: patttern-request

#251 - Apache HTTP v2 Error Logs LOGLEVEL may contain trailing integers

Issue - State: open - Opened by care2DavidDPD almost 5 years ago
Labels: bug

#249 - Added - to the clientip field of the S3_ACCESS_LOG pattern

Pull Request - State: closed - Opened by st1t almost 5 years ago - 1 comment
Labels: needs tests

#248 - Logstash plugins create events breaking ECS

Issue - State: closed - Opened by farrp about 5 years ago

#247 - Add the following Cisco log patterns:

Pull Request - State: open - Opened by walterpalagi about 5 years ago
Labels: needs tests

#246 - Aws patterns update

Pull Request - State: closed - Opened by jkburges about 5 years ago - 1 comment
Labels: needs reviewing, needs tests

#245 - Should the SPACE grok pattern match zero or more?

Issue - State: closed - Opened by zestysoft over 5 years ago - 2 comments

#244 - Support Tomcat 9 log patterns

Pull Request - State: closed - Opened by mitsu-ko over 5 years ago - 1 comment

#243 - HTTPD_COMBINEDLOG pattern conflicts with ECS v1.0

Issue - State: closed - Opened by C-Duv over 5 years ago - 4 comments

#242 - Add support for new edge location types

Pull Request - State: closed - Opened by autarchprinceps over 5 years ago - 1 comment

#241 - Added support for "SCHEDULE_SVC_DOWNTIME" event from Nagios.

Pull Request - State: open - Opened by swemarx over 5 years ago
Labels: breaking-compatibility, needs tests

#239 - Add glassfish LOGLEVELS

Issue - State: open - Opened by kallisti5 almost 6 years ago - 1 comment
Labels: enhancement, adoptme

#235 - Made TZ pattern more inclusive to all timezone patterns of the world

Pull Request - State: open - Opened by robin13 about 6 years ago - 4 comments

#233 - remove named capture groups from predefined grok patterns

Issue - State: closed - Opened by LucaWintergerst about 6 years ago
Labels: enhancement, breaking-compatibility

#232 - Incorrect pattern for AWS CLOUDFRONT_ACCESS_LOG

Issue - State: closed - Opened by jpleger about 6 years ago - 7 comments

#229 - SFW2

Pull Request - State: closed - Opened by dwbenjamin over 6 years ago - 1 comment

#227 - SuSE Firewall 2, does not return the date / time of the log entry.

Issue - State: closed - Opened by dwbenjamin over 6 years ago - 1 comment

#226 - Add Cisco ASA messages to firewalls patterns.

Pull Request - State: open - Opened by fchouina over 6 years ago - 6 comments
Labels: enhancement, needs tests

#225 - Process hits messages

Pull Request - State: closed - Opened by coaxial over 6 years ago - 2 comments
Labels: needs tests

#223 - Update SYSLOGBASE

Pull Request - State: closed - Opened by ghost over 6 years ago
Labels: enhancement, missing cla, needs tests

#218 - Allow scoped USERNAMEs

Pull Request - State: closed - Opened by simmel over 6 years ago

#215 - Minor update for some cases I found in my logs

Pull Request - State: closed - Opened by lingfish almost 7 years ago - 3 comments

#214 - HTTPD (Apache) combined grok pattern failing due to none interger response code

Issue - State: closed - Opened by tomrade almost 7 years ago - 2 comments
Labels: bug

#211 - Type-cast various integer quantities to int.

Pull Request - State: closed - Opened by MattSANU almost 7 years ago - 4 comments
Labels: enhancement, breaking-compatibility, discuss

#204 - adding a log format pattern for glassfish4/payara application servers

Pull Request - State: open - Opened by thomas-mc-work over 7 years ago - 2 comments
Labels: patttern-request, needs tests

#202 - Added nginx patterns file

Pull Request - State: closed - Opened by dr01 over 7 years ago
Labels: patttern-request, needs tests

#201 - Add patterns for some message IDs

Pull Request - State: open - Opened by anhlqn over 7 years ago - 4 comments

#192 - Update MONTH pattern to support Austrian Jänner

Pull Request - State: closed - Opened by bczifra almost 8 years ago

#190 - Make the S3 parsing more strict

Pull Request - State: closed - Opened by joshuaspence almost 8 years ago

#189 - Minor improvement to S3 grok patterns

Pull Request - State: closed - Opened by joshuaspence almost 8 years ago - 1 comment

#188 - Pattern for parsing golang logs?

Issue - State: closed - Opened by mcandre almost 8 years ago - 1 comment
Labels: question

#187 - Add "short" loglevels for Ceph logs

Issue - State: closed - Opened by rlueckl almost 8 years ago - 2 comments

#185 - Accept more than 23 hours as duration in Cisco firewall logs

Pull Request - State: open - Opened by thomaspatzke almost 8 years ago
Labels: needs tests

#181 - Added openvpn patterns

Pull Request - State: open - Opened by bizzelicious almost 8 years ago - 1 comment
Labels: patttern-request, needs tests

#180 - Adding VPC flowlogs to AWS patterns

Pull Request - State: open - Opened by bizzelicious almost 8 years ago - 1 comment
Labels: patttern-request, needs tests

#178 - Add patterns for Barracuda Spam Firewall

Pull Request - State: closed - Opened by anhlqn almost 8 years ago
Labels: patttern-request, needs tests

#175 - Update Cisco patterns

Pull Request - State: open - Opened by steelywing about 8 years ago
Labels: missing cla, needs details, needs tests

#174 - Httpd types

Pull Request - State: closed - Opened by chernjie about 8 years ago - 1 comment
Labels: breaking-compatibility

#173 - revisit existing patterns to add more type casting

Issue - State: closed - Opened by jsvd about 8 years ago - 12 comments
Labels: discuss

#161 - Grok IPV6 pattern not supporting IPv6 mapped IPv4 addresses.

Issue - State: open - Opened by jornane about 8 years ago - 2 comments

#159 - %UNIXPATH can cause RegEx DOS

Issue - State: closed - Opened by jsvd over 8 years ago - 3 comments
Labels: bug, P3, performance-regression, int-shortlist

#156 - Update grok-patterns : WINPATH

Pull Request - State: closed - Opened by gh-flo-vall over 8 years ago
Labels: needs tests

#152 - EMAILADDRESS pattern is NOT MATCHED [email protected]

Issue - State: closed - Opened by zacker330 over 8 years ago - 2 comments

#150 - Add various nagios grok patterns

Pull Request - State: open - Opened by rolandkool over 8 years ago
Labels: missing cla, needs tests

#143 - Change on SYSLOGFACILITY

Pull Request - State: closed - Opened by cedriczirtacic over 8 years ago - 1 comment
Labels: needs tests

#135 - Adding new patterns

Pull Request - State: open - Opened by Lowess over 8 years ago - 3 comments
Labels: patttern-request, needs tests

#134 - Add default nginx access log pattern

Pull Request - State: open - Opened by germaaan over 8 years ago - 2 comments
Labels: needs tests

#125 - Shorewall pattern not working properly

Issue - State: closed - Opened by VictorCovalski over 8 years ago

#124 - Adding DATE_8601 to the list of default Grok patterns

Pull Request - State: open - Opened by berglh over 8 years ago - 2 comments
Labels: needs tests

#123 - Minor change required for TOMCAT_DATESTAMP in patterns/java

Issue - State: open - Opened by rbjorklin over 8 years ago - 1 comment

#117 - Update bro

Pull Request - State: closed - Opened by ajmurphy almost 9 years ago - 7 comments
Labels: needs tests

#112 - Postgresql grok pattern fails

Issue - State: open - Opened by grahamrhay almost 9 years ago - 3 comments
Labels: bug

#104 - Issue73 awselb fix

Pull Request - State: closed - Opened by salexpdx about 9 years ago - 4 comments
Labels: breaking-compatibility

#73 - AWS ELB log regex doesn't support SSL cipher/protocol

Issue - State: closed - Opened by aodj about 9 years ago - 4 comments
Labels: adoptme, patttern-request

GitHub / logstash-plugins/logstash-patterns-core issues and pull requests