Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Grok extractor expects "Store as field" in 2.0 alpha-4 #1883
Grok input extractor expects "Store as field" meaning only one field per extractor can be extracted.
Steps to reproduce the problem
Java: OpenJDK 64-Bit Server VM (build 25.71-b15, mixed mode)
//Johan[image: Infogad bild 2]
I was hoping it would allow us to extract a regex portion into the field specified in "Store as field".
Hope to see DROP or ACCEPT in the field specified by Store as field.
Sorry to ask this question here, but it touches the grok patterns