title: Grok filter with this line (fail2ban output)
body: <p>I want to filter the following lines in logstash (this is output from fail2ban and the patterns that I have found so far do not really work)</p>
  
  <pre><code>2016-05-02 10:40:18,051 fail2ban.filter  [1122]: INFO   [bruteforce4] Found 192.168.1.3
  2016-05-02 10:40:22,155 fail2ban.filter  [1122]: INFO    [symfony-token-request-ban]Found 192.168.1.2
  2016-05-02 10:40:27,756 fail2ban.actions [1122]: NOTICE  [symfony-token-request-ban] Unban 192.168.1.1
  </code></pre>
  
  <p>Any help?</p>
  
  <pre><code>match =&gt; [ "message", "%{F2B_DATE:date} %{F2B_ACTION} %{WORD:level} %{F2B_JAIL} %{WORD:action} %{IP:ip}" ] 
  match =&gt; [ "message", "^%{DATE} %{TIME}" ] 
  match =&gt; [ "message", "%{F2B_DATE:date} %{F2B_ACTION} [%{INT}] %{WORD:level} %{F2B_JAIL} %{WORD:action} %{IP:ip}" ] 
  match =&gt; [ "message", "%{F2B_DATE:date} %{F2B_ACTION} %{F2B_LEVEL} %{GREEDYDATA:msg}?" ] 
  match =&gt; [ "message", "%{FAIL2BAN_BAN}" ] 
  </code></pre>