You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Ideally, we would have a Grok library we can reuse in both ES and LS, but for now, we can have the Java implementation embedded here. Open to separating this as well from the get go. We can discuss.
The grok implementation in Ingest won't work for Logstash because:
it combines patterns with regexp union | which prevents break_on_match => false from working in Logstash gork.
cannot be extracted from Elasticsearch due to dependency on Elasticsearch.
I'm open to review any implementation details or to share history on grok (originally written in 2004!), if you need it.
+1 on exploring this moving to java.
My intuition is that moving the capture mapping to Java will have some nice improvement since we can keep all of that work within Java and never enter JRuby during execution (regexp + capture handling).
It's in the title, also see #111 (comment) for the background.
The text was updated successfully, but these errors were encountered: