Allow to grok unpadded seconds

As identified in LOGSTASH-709 : Grok "TIME" failing on unpadded "seconds"
paurullan · Feb 17, 2014 · 815e984 · 815e984
1 parent f3994eb
commit 815e984
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/patterns/grok-patterns b/patterns/grok-patterns
@@ -57,7 +57,7 @@ YEAR (?>\d\d){1,2}
 HOUR (?:2[0123]|[01]?[0-9])
 MINUTE (?:[0-5][0-9])
 # '60' is a leap second in most time standards and thus is valid.
-SECOND (?:(?:[0-5][0-9]|60)(?:[:.,][0-9]+)?)
+SECOND (?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)
 TIME (?!<[0-9])%{HOUR}:%{MINUTE}(?::%{SECOND})(?![0-9])
 # datestamp is YYYY/MM/DD-HH:MM:SS.UUUU (or something like it)
 DATE_US %{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}