What pattern should I use to catch apache vhost items in Logstash?
<p>I am trying to catch the following in a logstash grok command:</p>

<pre><code>    www.example.com:443 41.177.65.213 - - [03/Sep/2016:15:05:49 +0200] "GET 
/feed/history?symbol=GGI&amp;resolution=D&amp;from=1472043948&amp;to=1472907948 
HTTP/1.1" 200 1337 "https://www.example.com" "Mozilla/5.0 (Windows NT 10.0; Win64; 
x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 
Safari/537.36"
</code></pre>

<p>I have tried:</p>

<pre><code>grok {
      match =&gt; { "message" =&gt; "%{HOSTNAME:vhost}\:%{NUMBER:port} %{COMBINEDAPACHELOG}" }
    }
</code></pre>

<p>but it doesn't seem to work</p>