Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Grok extractor: Allow returning only named captures #59

Closed
jalogisch opened this issue Jul 27, 2016 · 2 comments
Closed

Grok extractor: Allow returning only named captures #59

jalogisch opened this issue Jul 27, 2016 · 2 comments

Comments

@jalogisch
Copy link

@jalogisch jalogisch commented Jul 27, 2016

as this is available in the server: Graylog2/graylog2-server#1486

this should be ported to the pipelines

@tokred
Copy link

@tokred tokred commented Jul 28, 2016

Actually, this request already exists for some time in a similar manner :(
#22

@kroepke
Copy link
Member

@kroepke kroepke commented Jul 29, 2016

@tokred the issue is that without treating every regex as a grok pattern we cannot solve #22 unless we switch the regex library
upstream java-grok now supports "named captures only" so in 2.1 we'll support that.
Switching the default regex library is a little too much for this release, sorry

kroepke added a commit to Graylog2/graylog2-server that referenced this issue Jul 29, 2016
the server cache is necessary because the named captures support needs a separately compiled regex
so far the cache is only used by the grok function in the pipeline processor

fixes Graylog2/graylog-plugin-pipeline-processor#59
kroepke added a commit that referenced this issue Jul 29, 2016
the server cache is necessary because the named captures support needs a separately compiled regex
so far the cache is only used by the grok function in the pipeline processor

fixes #59
joschi added a commit to Graylog2/graylog2-server that referenced this issue Aug 1, 2016
The server cache is necessary because the named captures support needs a separately compiled regex.
So far the cache is only used by the grok function in the pipeline processor

Refs Graylog2/graylog-plugin-pipeline-processor#59
joschi added a commit that referenced this issue Aug 1, 2016
The server cache is necessary because the named captures support needs a separately compiled regex.
So far the cache is only used by the grok function in the pipeline processor

Closes #59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

3 participants