Hi Guys,
We are parsing openvpn standard logs verb 4 to ELK stack for analysis using customized ingest grok patterns and its been working great last month. then came in this month, as soon as the date shifted to 1st of May, the data seems to be unrecognizable. Checking the logs , seems the issue is because of double space in the timestamp of openvpn logs, which also seems to be true for status logs. Double spacing is beween Month and Month date Is this as designed? Or can be considered a bug, cause it won't match any existing date format as it is now. Any help would be appreciated..
Server Details : OpenVPN 2.4.8 x86_64-pc-linux-gnu
OS : Ubuntu 18.04
Sample Output
Wed May 6 10:25:50 2020 us=55373 Re-using SSL/TLS context
Wed May 6 10:25:50 2020 us=55456 Control Channel MTU parms [ L:1623 D:1138 EF:112 EB:0 ET:0 EL:3 ]
Wed May 6 10:25:50 2020 us=55478 Data Channel MTU parms [ L:1623 D:1450 EF:123 EB:406 ET:0 EL:3 ]
