{"action":"opened","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-filter-grok/issues/57","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-filter-grok/issues/57/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-filter-grok/issues/57/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-filter-grok/issues/57/events","html_url":"https://github.com/logstash-plugins/logstash-filter-grok/issues/57","id":111831671,"number":57,"title":"not parsing properly inside logstash 2 beta 2","user":{"login":"alemairebe","id":1832823,"avatar_url":"https://avatars.githubusercontent.com/u/1832823?v=3","gravatar_id":"","url":"https://api.github.com/users/alemairebe","html_url":"https://github.com/alemairebe","followers_url":"https://api.github.com/users/alemairebe/followers","following_url":"https://api.github.com/users/alemairebe/following{/other_user}","gists_url":"https://api.github.com/users/alemairebe/gists{/gist_id}","starred_url":"https://api.github.com/users/alemairebe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alemairebe/subscriptions","organizations_url":"https://api.github.com/users/alemairebe/orgs","repos_url":"https://api.github.com/users/alemairebe/repos","events_url":"https://api.github.com/users/alemairebe/events{/privacy}","received_events_url":"https://api.github.com/users/alemairebe/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-10-16T13:28:11Z","updated_at":"2015-10-16T13:28:11Z","closed_at":null,"body":"I was parsing syslog events ; and I got this mapping in version 2 beta 2\r\n?program \t\t<134>2015-10-16T14\r\n?referrer \t\t<134>2015-10-16T14:39:35.033147+02:00 centos6-\r\n?request \t\t<134>2015-10-16T1\r\n?response \t\t<13\r\n?syslog_facility \t\tlocal0\r\n?syslog_facility_code \t\t16\r\n?syslog_pri \t\t<13\r\n?syslog_severity \t\tinformational\r\n?syslog_severity_code \t\t6\r\n?timestamp \t\t<134>2015-10-16T14:39:35.0\r\nttype \t\tsyslog\r\n?verb \t\t<13\r\nI rolled back to  2 beta 1 and get far better result : \r\n?response \t\t200\r\n?syslog_facility \t\tlocal0\r\n?syslog_facility_code \t\t16\r\n?syslog_pri \t\t134\r\n?syslog_severity \t\tinformational\r\n?syslog_severity_code \t\t6\r\n?timestamp \t\t16/Oct/2015:15:26:16 +0200\r\nttype \t\tsyslog\r\n?verb \t\tGET\r\n\r\nI hope I post it to the right repo, I seems to my related to grok but could be also to logstash.\r\nI'm running logstash with 16 filter threads."}}