logstash-plugins / logstash-patterns-core

logstash-patterns-core/patterns/grok-patterns

Line 95 in 4ba9bf5

    
           LOGLEVEL ([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)

With the default error log message for Apache/2.4.6 (CentOS) - when bumping up trace levels ... the LOGLEVEL pattern, which results in _grokparsefailure

[Tue Nov 26 11:31:04.012247 2019] [proxy:trace2] [pid 1201] proxy_util.c(1985): ...

Apache HTTP v2 Error Logs LOGLEVEL may contain trailing integers