Skip to content

Instantly share code, notes, and snippets.

@Moqume

Moqume/extra

Created September 16, 2013 17:02
Show Gist options
  • Save Moqume/6583445 to your computer and use it in GitHub Desktop.
Save Moqume/6583445 to your computer and use it in GitHub Desktop.
Download ZIP
Grok IPv6 Pattern (Logstash)
Raw
extra
IP6 (?:([0-9A-Fa-f]{1,4}:([0-9A-Fa-f]{1,4}:([0-9A-Fa-f]{1,4}:([0-9A-Fa-f]{1,4}:([0-9A-Fa-f]{1,4}:[0-9A-Fa-f]{0,4}|:[0-9A-Fa-f]{1,4})?|(:[0-9A-Fa-f]{1,4}){0,2})|(:[0-9A-Fa-f]{1,4}){0,3})|(:[0-9A-Fa-f]{1,4}){0,4})|:(:[0-9A-Fa-f]{1,4}){0,5})((:[0-9A-Fa-f]{1,4}){2}|:(25[0-5]|(2[0-4]|1[0-9]|[1-9])?[0-9])(\.(25[0-5]|(2[0-4]|1[0-9]|[1-9])?[0-9])){3})|(([0-9A-Fa-f]{1,4}:){1,6}|:):[0-9A-Fa-f]{0,4}|([0-9A-Fa-f]{1,4}:){7}:)
IP6OR4 (?:%{IP}|%{IP6})
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment