filebeat7.14解析非结构化日志如何处理不规则的空格？

POST _ingest/pipeline/_simulate

{

  "pipeline": {

    "description": "多个空格，使用%{SPACE}*",

    "processors": [

      {

        "grok": {

          "field": "message",

          "patterns": [

            "%{TIMESTAMP_ISO8601:time} %{SPACE}* %{DATA:LEVEL} %{NUMBER:takes}"

          ]

        }

      }

    ]

  },

  "docs": [

    {

      "_source": {

        "message": "2021-08-25 18:31:00.065    INFO 1 --- [MONITOR-CLI-1] c.m.r.m.e.R.selecteSyncStatus : <== Total: 0"

      }

    }

  ]

}

{

  "docs" : [

    {

      "doc" : {

        "_index" : "_index",

        "_type" : "_doc",

        "_id" : "_id",

        "_source" : {

          "time" : "2021-08-25 18:31:00.065",

          "LEVEL" : "INFO",

          "message" : "2021-08-25 18:31:00.065    INFO 1 --- [MONITOR-CLI-1] c.m.r.m.e.R.selecteSyncStatus : <== Total: 0",

          "takes" : "1"

        },

        "_ingest" : {

          "timestamp" : "2021-09-14T03:09:33.110419Z"

        }

      }

    }

  ]

}