how to capture regex groups with /g ?

[_asp_]

Hi,

I have following excerpt of a log line:

... [NO SORT], #0...#4000 (PageSize: 4001), , Fetched: 13, 687 ms0...END (PageSize: INFINITE), , Fetched: 147, 15 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms0...END (PageSize: INFINITE), , Fetched: 147, 15 ms0...END (PageSize: INFINITE), , Fetched: 147, 31 ms0...END (PageSize: INFINITE), , Fetched: 147, 47 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms0...END (PageSize: INFINITE), , Fetched: 147, 15 ms0...END (PageSize: INFINITE), , Fetched: 147, 0 ms0...END (PageSize: INFINITE), , Fetched: 147, 32 ms0...END (PageSize: INFINITE), , Fetched: 147, 46 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms0...END (PageSize: INFINITE), , Fetched: 147, 16 ms

I need to extract all given ms and aggregate them together and save them as field.
In regex I can get the values as following:

Code: Select all

/Fetched:\s\d+,\s*(\d+) ms/g

This gives me 14 regex groups back.

But how do I do it in logstash? And how do I aggregate them together? (value1+value2+value3...)

Thanks, Andreas

[hsmith]

Have you looked at the Regular Expressions section on this page?