logstash/grok-patterns — pull request #7 by jasonrojas (2013-06-28 20:59:38+00:00)
Title: Adding a xforwarded for grok pattern

I see this a lot in apache logs when %{X-Forwarded-For}i is logged, multiple IP's aren't caught in this case where the header is passed like so:

X-Forwarded-For: 8.8.8.8, 12.34.12.12, 4.2.2.1