dcos$PATTERNS_DIR

PATHELEM[^/]+TASKPATH^/var/lib/mesos/slave/slaves/%{PATHELEM:agent}/frameworks/%{PATHELEM:framework}/executors/%{PATHELEM:executor}/runs/%{PATHELEM:run}

grok $PATTERNS_DIR

filter{grok{patterns_dir=>"$PATTERNS_DIR"match=>{"file"=>"%{TASKPATH}"}

}}

agent framework executor run

framework:*framework

framework

$executor1 $framework2

$executor1

"$executor1"

$executor1

"$executor1"ANDNOTexecutor:$executor1

$framework1 $executor1$executor2

"$framework1"OR"$executor1"OR"$executor2"

$framework1 $executor1 $executor2

("$framework1"OR"$executor1"OR"$executor2")ANDNOT(framework:$framework1ORexecutor:$executor1ORexecutor:$executor2)

$framework1 $agent_host1

host:$agent_host1AND("$framework1"OR"$executor1"OR"$executor2")

$framework1 $agent1

$agent_host1

host:$agent_host1AND("$framework1"OR"$executor1"OR"$executor2")ANDNOTagent:$agent