I want drop NUMBER with grok

1

log :

[conn781355]

plase give me solution for drop number

2

Hi Alvianno ,

you can use these lines to remove the number for your given example ,

[[inputs.logparser]]
  files = [" ... "]

 [inputs.logparser.grok]
    patterns = ["\\[%{NONUM:nonum}%{PART2:dropme:drop}\\]"]
    custom_patterns = '''
    NONUM (.{4})
    PART2 (.{6})
    '''