有人可以帮助我创建Grok过滤器模式以过滤以下日志模式的每个字段吗?
1.2016-05-17 00:00:22,832信息FSNamesystem.audit:允许= true ugi = ambari-qa(auth:SIMPLE)ip = / 232.52.12.10 cmd = delete src = / tmp / hive / ambari-qa / cc03bf0a-28bd-4607-aea4-ff5690ed6d55 dst = null perm = null proto = rpc