$ ls blog/

Notes on parsing logs

Field detection, named capture groups, decoder dialects, and the small gotchas that break a parser in production — from the people building LogForge.

Turning a raw log line into a working regex (and Grok, and a Wazuh decoder)