[
  {
    "set": {
      "field": "error.message",
      "value": "{{_ingest.pipeline}}: processors {{_ingest.on_failure_processor_type}} in pipeline {{_ingest.on_failure_pipeline}} failed with message {{_ingest.on_failure_message}}"
    }
  }
]


Mar 11, 2024 @ 10:56:05.149
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_io.c(1103): [client 10.235.70.188:443] AH02001: Connection closed to child 0 with standard shutdown (server SFS-RP:80)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_io.c(1103): [client 10.235.70.188:443] AH02001: Connection closed to child 0 with standard shutdown (server SFS-RP:80)
Mar 11, 2024 @ 10:56:05.149
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3173): [client 10.235.70.188:443] AH02642: proxy: connection shutdown
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3173): [client 10.235.70.188:443] AH02642: proxy: connection shutdown
Mar 11, 2024 @ 10:56:05.149
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] mod_deflate.c(853): [client 10.0.0.3:37270] AH01384: Zlib: Compressed 605 to 438 : URL /wacsmss/group/mssportal/home
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] mod_deflate.c(853): [client 10.0.0.3:37270] AH01384: Zlib: Compressed 605 to 438 : URL /wacsmss/group/mssportal/home
Mar 11, 2024 @ 10:56:05.149
Mar 11, 2024 @ 10:56:05.138
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(2069): [client 10.235.70.188:443] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(2069): [client 10.235.70.188:443] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 11, 2024 @ 10:56:05.134
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(1584): [client 10.235.70.188:443] AH02275: Certificate Verification, depth 0, CRL checking mode: none (0) [subject: <PRESIDIO_ANONYMIZED_EMAIL_ADDRESS>,CN=*.sfs-qualif.caas-cnp-apps-v2.com.intraorange,OU=Orange Business Services,O=Orange,L=Paris,ST=Paris,C=FR / issuer: CN=Orange Internal G2 Server CA,OU=FR 89 380129866,O=Orange,C=FR / serial: 39E5400000BE3547743EEABB89BF15AD9365A9EA / notbefore: Apr  4 16:03:28 2023 GMT / notafter: Apr  4 16:03:28 2025 GMT]
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(1584): [client 10.235.70.188:443] AH02275: Certificate Verification, depth 0, CRL checking mode: none (0) [subject: <PRESIDIO_ANONYMIZED_EMAIL_ADDRESS>,CN=*.sfs-qualif.caas-cnp-apps-v2.com.intraorange,OU=Orange Business Services,O=Orange,L=Paris,ST=Paris,C=FR / issuer: CN=Orange Internal G2 Server CA,OU=FR 89 380129866,O=Orange,C=FR / serial: 39E5400000BE3547743EEABB89BF15AD9365A9EA / notbefore: Apr  4 16:03:28 2023 GMT / notafter: Apr  4 16:03:28 2025 GMT]
Mar 11, 2024 @ 10:56:05.134
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(1584): [client 10.235.70.188:443] AH02275: Certificate Verification, depth 0, CRL checking mode: none (0) [subject: <PRESIDIO_ANONYMIZED_EMAIL_ADDRESS>,CN=*.sfs-qualif.caas-cnp-apps-v2.com.intraorange,OU=Orange Business Services,O=Orange,L=Paris,ST=Paris,C=FR / issuer: CN=Orange Internal G2 Server CA,OU=FR 89 380129866,O=Orange,C=FR / serial: 39E5400000BE3547743EEABB89BF15AD9365A9EA / notbefore: Apr  4 16:03:28 2023 GMT / notafter: Apr  4 16:03:28 2025 GMT]

- message, column 5, row 7
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] ssl_engine_kernel.c(1584): [client 10.235.70.188:443] AH02275: Certificate Verification, depth 0, CRL checking mode: none (0) [subject: <PRESIDIO_ANONYMIZED_EMAIL_ADDRESS>,CN=*.sfs-qualif.caas-cnp-apps-v2.com.intraorange,OU=Orange Business Services,O=Orange,L=Paris,ST=Paris,C=FR / issuer: CN=Orange Internal G2 Server CA,OU=FR 89 380129866,O=Orange,C=FR / serial: 39E5400000BE3547743EEABB89BF15AD9365A9EA / notbefore: Apr  4 16:03:28 2023 GMT / notafter: Apr  4 16:03:28 2025 GMT]
Mar 11, 2024 @ 10:56:05.122
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3066): AH02824: HTTPS: connection established with 10.235.70.188:443 (*)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3066): AH02824: HTTPS: connection established with 10.235.70.188:443 (*)
Mar 11, 2024 @ 10:56:05.122
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3234): AH00962: HTTPS: connection complete to 10.235.70.188:443 (qua-rpwa-mss-mss.sfs-qualif.caas-cnp-apps-v2.com.intraorange)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(3234): AH00962: HTTPS: connection complete to 10.235.70.188:443 (qua-rpwa-mss-mss.sfs-qualif.caas-cnp-apps-v2.com.intraorange)
Mar 11, 2024 @ 10:56:05.122
ERROR
 [Mon Mar 11 09:56:05 2024] [info] [client 10.235.70.188:443] AH01964: Connection to child 0 established (server SFS-RP:80)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [info] [client 10.235.70.188:443] AH01964: Connection to child 0 established (server SFS-RP:80)
Mar 11, 2024 @ 10:56:05.117
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(2596): [client 10.0.0.3:37270] AH00947: connected /wacsmss/group/mssportal/home to qua-rpwa-mss-mss.sfs-qualif.caas-cnp-apps-v2.com.intraorange:443
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(2596): [client 10.0.0.3:37270] AH00947: connected /wacsmss/group/mssportal/home to qua-rpwa-mss-mss.sfs-qualif.caas-cnp-apps-v2.com.intraorange:443
Mar 11, 2024 @ 10:56:05.105
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] mod_proxy.c(1265): [client 10.0.0.3:37270] AH01143: Running scheme https handler (attempt 0)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] mod_proxy.c(1265): [client 10.0.0.3:37270] AH01143: Running scheme https handler (attempt 0)
Mar 11, 2024 @ 10:56:05.105
ERROR
 [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(2331): AH00942: HTTPS: has acquired connection for (*)
logs-sfs.error@custom: processors dissect in pipeline logs-sfs.error@custom failed with message Unable to find match for dissect pattern: [%{timestamp}] [%{log_level}] %{filename}(%{linenumber}): [%{client_ip}] [%{ignored_message}] %{restOfLine} against source:  [Mon Mar 11 09:56:05 2024] [debug] proxy_util.c(2331): AH00942: HTTPS: has acquired connection for (*)
Mar 11, 2024 @ 10:56:05.105


the first dissect is there to dissect the full log in event.original that start like this “APACHE-ERROR-SFS-RPXD-MSS-MSS-UAT-G03R04C12”, but i block startin the date