Hello,
I can write multiple regexes when viewing logs from Loki in Grafana. For example:
{job=~"myjob"}
| regexp "^(?P<Log_Time>\\d{4}\\/\\d{2}\\/\\d{2} \\d{2}:\\d{2}:\\d{2} \\d+) +(?P<Message>.*)$"
| regexp "^(?P<Log_Time>\\d{1,2}:\\d{1,2}:\\d{1,2}) +(?P<Level>(ERR|INFO))$"
But I can’t format each regex to its own format. In the example below, the last line_format rule always works.
{job=~"myjob"}
| regexp "^(?P<Log_Time>\\d{4}\\/\\d{2}\\/\\d{2} \\d{2}:\\d{2}:\\d{2} \\d+) +(?P<Message>.*)$"
| logfmt
| line_format "{{ .Log_Time }} | {{ .Message }}"
| regexp "^(?P<Log_Time>\\d{1,2}:\\d{1,2}:\\d{1,2}) +(?P<Level>(ERR|INFO))$"
| logfmt
| line_format "{{ .Log_Time }} | {{ .Level }}"