Multiple Patterns

[mthota15]

Does pygrok support matching of string against multiple patterns?

Any example on how to do that?

[garyelephant]

Please elaborate your requirement, @mthota15

[mthota15]

I was able to do this way.

from pygrok import Grok
import json
text = [
'37.162.60.195 - - [06/Jun/2018:17:31:29 -0400] "PUT /app/main/posts HTTP/1.0" 200 5055 "http://harris-johnson.com/main/register/" "Mozilla/5.0 (Windows NT 5.0) AppleWebKit/5311 (KHTML, like Gecko) Chrome/13.0.850.0 Safari/5311"',
'::1 - - [26/Dec/2016:16:16:29 +0200] "GET /favicon.ico HTTP/1.1" 404 209',
'[Mon Dec 26 16:22:08 2016] [error] [client 192.168.33.1] File does not exist: /var/www/favicon.ico'
]

patterns = {
'^%{COMBINEDAPACHELOG}$',
'^%{COMMONAPACHELOG}$',
'^%{HTTPD_ERRORLOG}$'
}

def parse_type(text):
for k in patterns:
return Grok(k).match(text)

for i in text:
parsed = parse_type(i)
if parsed:
print(json.dumps(parsed))

please let me know if there is a better way to do it with pygrok.

[tcxdgit]

+1

[alextremblay]

grok patterns are a superset of regex patterns. you can use a regex alternator group to match against 2 or more patterns like so:

pattern = r'^(%{COMBINEDAPACHELOG}|%{COMMONAPACHELOG}|%{HTTPD_ERRORLOG})$'
parser = Grok(pattern)