logstash-plugins/logstash-patterns-core

View on GitHub

Stars: 2.2k
Forks: 960
Open beginner issues: 0
Indexed issues: 68

Dominant language: Ruby
License: Apache-2.0
Last GitHub push: Jul 29, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

68 open issues indexed

patterns ecs-v1 to use host.name instead of host.hostname Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#326 · Opened Jun 26, 2024
HTTPD24_ERRORLOG fails in if enabling loglevel between trace1 and trace8, due to number in loglevel Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#325 · Opened Jan 25, 2024
HTTPDUSER pattern does not match for empty user for standard apache log, generates grokparsefailure Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#323 · Opened Jan 31, 2023
CISCOFW106006_106007_106010 not matching Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#322 · 1 comment · Opened Jan 2, 2023
grok pattern IPTABLES does not always match Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 62/100

logstash-plugins/logstash-patterns-core#316 · 3 comments · Opened Aug 6, 2022
patterns/{ecs-v1,legacy}/grok-patterns: SYSLOGFACILITY pattern is misleading Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#315 · 1 comment · Opened Jul 26, 2022
new Grok Pattern to match multiline strings, e.g. Stacktraces Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

logstash-plugins/logstash-patterns-core#314 · Opened Jul 7, 2022
Scope ID in IPv6 Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

logstash-plugins/logstash-patterns-core#308 · Opened Oct 30, 2021
Can you help me to write grok pattern for this log, please? Open

help wanted

Difficulty 3/5 1-2 days Newbie friendliness 25/100

logstash-plugins/logstash-patterns-core#301 · 1 comment · Opened Jan 28, 2021
Apache HTTP v2 Error Logs LOGLEVEL may contain trailing integers Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#251 · Opened Dec 6, 2019
Additional patterns request for CISCO ASA message ids Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#240 · 1 comment · Opened Jan 24, 2019
Add glassfish LOGLEVELS Open

adoptme enhancement

Difficulty 1/5 Under an hour Newbie friendliness 48/100

logstash-plugins/logstash-patterns-core#239 · 1 comment · 1 reaction · Opened Dec 6, 2018
Add support for truncated bytes in MAC addresses as seen with arpwatch and elsewhere Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#236 · Opened Oct 25, 2018
Some Cisco ASA logs resolve IP addresses to hosts Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#224 · 1 comment · Opened Mar 21, 2018
IPv6 in Uris Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#222 · 1 reaction · Opened Feb 23, 2018
DATESTAMPS Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#220 · 1 comment · Opened Feb 19, 2018
Unnecessary Dependency? Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#210 · 2 comments · Opened Sep 18, 2017
Additional patterns request for the following CISCO ASA message ids.. Open

adoptme enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#208 · 1 comment · Opened Aug 3, 2017
ANTLAB INNGATE SYSLOG filtering with logstash Open

Difficulty 3/5 1-2 days Newbie friendliness 20/100

logstash-plugins/logstash-patterns-core#207 · Opened Jun 5, 2017
Gitolite syslog parsing Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#198 · Opened Apr 4, 2017
COMBINEDAPACHELOG leading to grokparsefailures due to Email as Username Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#196 · Opened Feb 8, 2017
Support empty response status in COMBINEDAPACHELOG Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

logstash-plugins/logstash-patterns-core#194 · 1 comment · Opened Jan 24, 2017
Split the `URIPARAM` pattern into smaller sub-patterns Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#182 · Opened Oct 31, 2016
using Docker for testing Open

Difficulty 1/5 Under an hour Newbie friendliness 20/100

logstash-plugins/logstash-patterns-core#176 · Opened Sep 30, 2016
Pattern TZ does not include most timezones Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#172 · 9 comments · Opened Sep 15, 2016
Specs: `grok_match` isn't exact Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#168 · 1 comment · Opened Aug 10, 2016
JAVATHREAD pattern is kinda ... Open

Difficulty 2/5 1-3 hours Newbie friendliness 15/100

logstash-plugins/logstash-patterns-core#165 · Opened Jul 28, 2016
# NetScreen firewall logs NETSCREENSESSIONLOG - Now is RFC5424, so not parsing. Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#162 · 1 comment · Opened Jul 6, 2016
Grok IPV6 pattern not supporting IPv6 mapped IPv4 addresses. Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

logstash-plugins/logstash-patterns-core#161 · 2 comments · 2 reactions · Opened Jul 4, 2016
Wrong ASA field type Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#160 · 1 comment · 1 reaction · Opened Jun 29, 2016
AWS ELB matching pattern optimization Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

logstash-plugins/logstash-patterns-core#140 · 2 comments · Opened Apr 4, 2016
proper fix for the URIPATH pattern Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

logstash-plugins/logstash-patterns-core#138 · Opened Mar 24, 2016
grok-patterns: firewalls, add SuSEfirewall2 Open

Difficulty 2/5 1-3 hours Newbie friendliness 40/100

logstash-plugins/logstash-patterns-core#131 · Opened Feb 12, 2016
grok fails to parse lines with backslashes in requests of URIPATHPARAM Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#129 · Opened Feb 6, 2016
mcollective and mcollective-patterns contain a duplicate pattern definition Open

Difficulty 3/5 1-2 days Newbie friendliness 32/100

logstash-plugins/logstash-patterns-core#128 · 1 comment · Opened Jan 31, 2016
HOSTNAME definition with unexpected group at the end Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#126 · Opened Jan 30, 2016
Minor change required for TOMCAT_DATESTAMP in patterns/java Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#123 · 1 comment · Opened Jan 8, 2016
grok-patterns MONTHNUM (?:0?[1-9]|1[0-2]) 如果是10,11,12就会匹配出错，这样匹配出来的是１ Open

Difficulty 2/5 1-3 hours Newbie friendliness 20/100

logstash-plugins/logstash-patterns-core#121 · 2 comments · Opened Nov 17, 2015
HOSTNAME regex can't parse urls with underscores in them Open

invalid

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

logstash-plugins/logstash-patterns-core#116 · 2 comments · Opened Nov 2, 2015
how to display pattern group Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

logstash-plugins/logstash-patterns-core#113 · Opened Oct 28, 2015
Postgresql grok pattern fails Open

bug

logstash-plugins/logstash-patterns-core#112 · 3 comments · 1 assignee · Opened Oct 22, 2015
EMAILLOCALPART Pattern doesn't match some accounts Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

logstash-plugins/logstash-patterns-core#108 · 4 comments · Opened Sep 29, 2015
grok-patterns: IPORHOST - divergent result Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#103 · Opened Sep 14, 2015
Improve test for HTTPD Open

adoptme enhancement missing test

Difficulty 3/5 1-2 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#101 · Opened Sep 11, 2015
test would be necessary for the nagios notification patterns Open

adoptme enhancement missing test

Difficulty 3/5 1-2 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#99 · Opened Sep 11, 2015
Allowing underscores in hostname pattern Open

adoptme enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#98 · 1 comment · Opened Sep 11, 2015
Need test for the common patterns for Exim Open

adoptme enhancement missing test

Difficulty 3/5 1-2 days Newbie friendliness 30/100

logstash-plugins/logstash-patterns-core#97 · 2 comments · Opened Sep 11, 2015
Add @ to the username pattern Open

adoptme enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

logstash-plugins/logstash-patterns-core#95 · Opened Sep 11, 2015
The field syslog_server should be optional in HAPROXYHTTP Open

adoptme enhancement

Difficulty 3/5 1-2 days Newbie friendliness 25/100

logstash-plugins/logstash-patterns-core#94 · Opened Sep 11, 2015
Test need for Junos Firewall patterns Open

adoptme enhancement help wanted missing test

Difficulty 4/5 3-5 days Newbie friendliness 35/100

logstash-plugins/logstash-patterns-core#91 · Opened Sep 7, 2015

logstash-plugins/logstash-patterns-core

Get new issues in your inbox