{"action":"created","issue":{"url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/1","labels_url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/1/comments","events_url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/1/events","html_url":"https://github.com/reighnman/Graylog_Content_Pack_WinDNS/issues/1","id":115493099,"number":1,"title":"Grok Pattern for European Timestamp","user":{"login":"renapu","id":15243394,"avatar_url":"https://avatars.githubusercontent.com/u/15243394?v=3","gravatar_id":"","url":"https://api.github.com/users/renapu","html_url":"https://github.com/renapu","followers_url":"https://api.github.com/users/renapu/followers","following_url":"https://api.github.com/users/renapu/following{/other_user}","gists_url":"https://api.github.com/users/renapu/gists{/gist_id}","starred_url":"https://api.github.com/users/renapu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/renapu/subscriptions","organizations_url":"https://api.github.com/users/renapu/orgs","repos_url":"https://api.github.com/users/renapu/repos","events_url":"https://api.github.com/users/renapu/events{/privacy}","received_events_url":"https://api.github.com/users/renapu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-06T12:04:45Z","updated_at":"2015-12-07T08:53:12Z","closed_at":null,"body":"Hi,\r\n\r\ni want to mention that if you have an European Timestamp like \"6.11.2015 13:01:29 1274 PACKET....\" the GROK-Pattern wont match. You have to Change WINDNS_TIME to \"(?:0?[1-9]|1[0-2])[.-](?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])[.-](?>\\d\\d){1,2}\\s(?!<[0-9])(?:2[0123]|[01]?[0-9]):(?:[0-5][0-9]):(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)\" (without Quotes).\r\n\r\nAnd don't forget to add the Static Field: \"SourceModuleName: dns\" to the DNS-Server GELF-Input if you dont use the Content-Pack generated input.\r\n\r\nKind Regards,\r\nRene"},"comment":{"url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/comments/162451402","html_url":"https://github.com/reighnman/Graylog_Content_Pack_WinDNS/issues/1#issuecomment-162451402","issue_url":"https://api.github.com/repos/reighnman/Graylog_Content_Pack_WinDNS/issues/1","id":162451402,"user":{"login":"renapu","id":15243394,"avatar_url":"https://avatars.githubusercontent.com/u/15243394?v=3","gravatar_id":"","url":"https://api.github.com/users/renapu","html_url":"https://github.com/renapu","followers_url":"https://api.github.com/users/renapu/followers","following_url":"https://api.github.com/users/renapu/following{/other_user}","gists_url":"https://api.github.com/users/renapu/gists{/gist_id}","starred_url":"https://api.github.com/users/renapu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/renapu/subscriptions","organizations_url":"https://api.github.com/users/renapu/orgs","repos_url":"https://api.github.com/users/renapu/repos","events_url":"https://api.github.com/users/renapu/events{/privacy}","received_events_url":"https://api.github.com/users/renapu/received_events","type":"User","site_admin":false},"created_at":"2015-12-07T08:53:12Z","updated_at":"2015-12-07T08:53:12Z","body":"Sry for the late Answer, but no it doesn't work with the pattern above.\r\n"}}