title: Logstash pattern for log4j
body: <p>I'm setting up Elasticsearch, Logstash and Kibana. I encountered an error when I am configuring "logstash.conf". Here's the error I got.</p>
  
  <pre><code>{:timestamp=&gt;"2015-05-25T21:56:59.907000-0400", :message=&gt;"Error: Expected one of #, {, ,, ] at line 12, column 49 (byte 265) after filter {\n  grok {\n     match =&gt; [\"message\", \"&lt;log4j:event logger=\""}
  {:timestamp=&gt;"2015-05-25T21:56:59.915000-0400", :message=&gt;"You may be interested in the '--configtest' flag which you can\nuse to validate logstash's configuration before you choose\nto restart a running system."}
  </code></pre>
  
  <p>This is my logstash.conf</p>
  
  <pre><code>grok {
     match =&gt; ["message", "&lt;log4j:event logger="%{DATA:emitter}" timestamp="%{BASE10NUM:timestamp}" level="%{LOGLEVEL:level}" thread="%{DATA:thread}"&gt;, &lt;log4j:message&gt;&lt;%{GREEDYDATA:message}&gt;&lt;/log4j:message&gt;" ]
  }
  </code></pre>
  
  <p>I am new to ELK.</p>