2018-05-07 11:38:56,748 [15]错误Library.Logger.Log4NetLogger [(null)]-{“ Component”:“ Service”,“ Message”:“ Exception in Authorization.Exception:找不到登录ID的角色: 域\用户0 “,” Exception“:{” ClassName“:” System.Exception“,” Message“:”没有角色 找到登录ID: Domain \ User0“,” Data“:{},” InnerException“:null,” HelpURL“:null,” StackTraceString“:” 在AuthorizationBll.cs:line中的Authorization.GetRoles(String loginId)处 146 \ r \ n在AuthorizationBll.CheckAuthorization(String loginId,String \ Services \ AuthorizationBll.cs:line中的operationName) 61“,” RemoteStackTraceString“:null,” RemoteStackIndex“:0:” ExceptionMethod“:” 8 \ nGetRoles \ nServices.BusinessLogic, 版本= 1.0.0.0,文化=中性, PublicKeyToken =空\ nAuthorizationBll \ nSystem.Collections.Generic.List`1 [System.String] GetRoles(System.String)“,” HResult“:-2146233088,” Source“:” Services.BusinessLogic“,” WatsonBuckets“:null},” ErrorLevel“:1,” ErrorLevelType“:” Error“,” CurrentDateTime“: “ 2018-05-07T11:38:56.6918708 + 05:30”,“ ManagedThreadId”:15,“ AdditonalData”:null,“ Context”:null}
我有这个日志,我想从文本中提取4件事并进行弹性搜索。我正在使用以下grok
%{GREEDYDATA:message}
- 组件名称2。消息3:异常4:堆栈跟踪。
这怎么办?