2016-05-30 46 views

回答

6

真正的问题是filebeatdoes not support \d

替换\d通过[0-9]您的正则表达式将工作。

我建议你看看filebeat的Supported Patterns

此外,请确定您使用的是^,它代表字符串的开头。

3
Regex: (^\d) 

1st Capturing group (^\d) 
    ^Match at the start of the string 
    \d match a digit [0-9] 
0

您可以使用:

^\d{2}:\d{2}:\d{2} 

字符^一行的开头匹配。

0

你可以使用这个表达式:

^([0-9]{2}:?){3}


DEMO


Assert position at the beginning of the string «^» 
Match the regex below and capture its match into backreference number 1 «([0-9]{2}:?){3}» 
    Exactly 3 times «{3}» 
     You repeated the capturing group itself. The group will capture only the last iteration. Put a capturing group around the repeated group to capture all iterations. «{3}» 
     Or, if you don’t want to capture anything, replace the capturing group with a non-capturing group to make your regex more efficient. 
    Match a single character in the range between “0” and “9” «[0-9]{2}» 
     Exactly 2 times «{2}» 
    Match the character “:” literally «:?» 
     Between zero and one times, as many times as possible, giving back as needed (greedy) «?» 
相关问题