https://bokamba.com/blog Engineer-voiced notes on parsing logs: turning raw log lines into working regex, Grok patterns, Wazuh decoders, and rsyslog rulebases. en-us Fri, 03 Jul 2026 00:00:00 GMT https://bokamba.com/blog/log-to-regex/ How field detection turns one log line into a named-capture regex, a Grok pattern, and a Wazuh decoder — and why the same idea is spelled three ways. Fri, 03 Jul 2026 00:00:00 GMT https://bokamba.com/blog/log-to-regex/