Add new grok pattern for matching dates like 'Wed Dec 08 19:57:42 -08…

…00 2010' which are found in rails logs
trentluo · Jan 22, 2011 · c09d5e2 · c09d5e2
1 parent d101346
commit c09d5e2
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/patterns/grok-patterns b/patterns/grok-patterns
@@ -88,3 +88,6 @@ QS %{QUOTEDSTRING}
 # Log formats
 SYSLOGBASE %{SYSLOGTIMESTAMP:timestamp} (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource} %{SYSLOGPROG}:
 COMBINEDAPACHELOG %{IPORHOST:clientip} %{USER:ident} %{USER:auth} \[%{HTTPDATE:timestamp}\] "%{WORD:verb} %{URIPATHPARAM:request} HTTP/%{NUMBER:httpversion}" %{NUMBER:response} (?:%{NUMBER:bytes}|-) "(?:%{URI:referrer}|-)" %{QS:agent}
+
+# Custom formats
+DATESTAMP_RAILS %{DAY} %{MONTH} %{MONTHDAY} %{TIME} (?:%{INT:ZONE} )?%{YEAR}