grok 正则也支持常规正则
2016-08-29 17:40:01,19 INFO com.zjzc.common.utils.HttpUtil - 请求接口: https://www.zjcap.cn/pay/interface/querypayorder, 耗时=-173 
^\s*%{TIMESTAMP_ISO8601}
{
  "TIMESTAMP_ISO8601": [
    [
      "2016-08-29 17:40:01,19"
    ]
  ],
  "YEAR": [
    [
      "2016"
    ]
  ],
  "MONTHNUM": [
    [
      "08"
    ]
  ],
  "MONTHDAY": [
    [
      "29"
    ]
  ],
  "HOUR": [
    [
      "17",
      null
    ]
  ],
  "MINUTE": [
    [
      "40",
      null
    ]
  ],
  "SECOND": [
    [
      "01,19"
    ]
  ],
  "ISO8601_TIMEZONE": [
    [
      null
    ]
  ]
} 
                    
                 
                
            
         浙公网安备 33010602011771号
浙公网安备 33010602011771号