logstash 贪婪匹配

 05:50:47 192.168.5.116 GET /Hotel/HotelDisplay/cncqcqb230 - 80 - 192.168.9.2 Mozilla/5.0+(Macintosh;+U;+Intel+Mac+OS+X+10.9;+en-US;+rv:1.9pre)+Gecko - 200 0 0 45


s+(?<time>%{TIME})s+%{IPORHOST:clientip}s+%{WORD:verb}s+(?<api>(S+))s+-s+(?<port>([0-9]{2}.*))s+-s+


此时匹配到了:

{
  "time": [
    [
      "05:50:47"
    ]
  ],
  "clientip": [
    [
      "192.168.5.116"
    ]
  ],
  "verb": [
    [
      "GET"
    ]
  ],
  "api": [
    [
      "/Hotel/HotelDisplay/cncqcqb230"
    ]
  ],
  "port": [
    [
      "80 - 192.168.9.2 Mozilla/5.0+(Macintosh;+U;+Intel+Mac+OS+X+10.9;+en-US;+rv:1.9pre)+Gecko"
    ]
  ]
}


/*************************************************************************************

s+(?<time>%{TIME})s+%{IPORHOST:clientip}s+%{WORD:verb}s+(?<api>(S+))s+-s+(?<port>([0-9]{2}.*?))s+-s+


此时正确

{
  "time": [
    [
      "05:50:47"
    ]
  ],
  "clientip": [
    [
      "192.168.5.116"
    ]
  ],
  "verb": [
    [
      "GET"
    ]
  ],
  "api": [
    [
      "/Hotel/HotelDisplay/cncqcqb230"
    ]
  ],
  "port": [
    [
      "80"
    ]
  ]
}