Skip to content
This repository has been archived by the owner on Mar 21, 2023. It is now read-only.

Grok extractor: Allow returning only named captures #59

Closed
jalogisch opened this issue Jul 27, 2016 · 2 comments · Fixed by Graylog2/graylog2-server#2566 or #65
Closed

Grok extractor: Allow returning only named captures #59

jalogisch opened this issue Jul 27, 2016 · 2 comments · Fixed by Graylog2/graylog2-server#2566 or #65

Comments

@jalogisch
Copy link

as this is available in the server: Graylog2/graylog2-server#1486

this should be ported to the pipelines

@tokred
Copy link

tokred commented Jul 28, 2016

Actually, this request already exists for some time in a similar manner :(
#22

@kroepke
Copy link
Member

kroepke commented Jul 29, 2016

@tokred the issue is that without treating every regex as a grok pattern we cannot solve #22 unless we switch the regex library
upstream java-grok now supports "named captures only" so in 2.1 we'll support that.
Switching the default regex library is a little too much for this release, sorry

kroepke added a commit to Graylog2/graylog2-server that referenced this issue Jul 29, 2016
the server cache is necessary because the named captures support needs a separately compiled regex
so far the cache is only used by the grok function in the pipeline processor

fixes Graylog2/graylog-plugin-pipeline-processor#59
kroepke added a commit that referenced this issue Jul 29, 2016
the server cache is necessary because the named captures support needs a separately compiled regex
so far the cache is only used by the grok function in the pipeline processor

fixes #59
joschi pushed a commit to Graylog2/graylog2-server that referenced this issue Aug 1, 2016
The server cache is necessary because the named captures support needs a separately compiled regex.
So far the cache is only used by the grok function in the pipeline processor

Refs Graylog2/graylog-plugin-pipeline-processor#59
joschi pushed a commit that referenced this issue Aug 1, 2016
The server cache is necessary because the named captures support needs a separately compiled regex.
So far the cache is only used by the grok function in the pipeline processor

Closes #59
luca-digrazia pushed a commit to luca-digrazia/DatasetCommitsDiffSearch that referenced this issue Sep 4, 2022
    The server cache is necessary because the named captures support needs a separately compiled regex.
    So far the cache is only used by the grok function in the pipeline processor

    Refs Graylog2/graylog-plugin-pipeline-processor#59
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
3 participants