The syntax ingest pipeline template convenient for search 1[ 2 { 3 "grok": { 4 "field": "message", 5 "patterns": [ 6 "%{IPORHOST:remote_addr} - %{USERNAME:remote_user} \[%{HTTPDATE:time_local}\] \"%{DATA:request}\" %{INT:status} %{NUMBER:bytes_sent} …

read more