Add support for fieldname to the Grok filter

Description

The json format in an input module allows to create multiple fields in the event,
and some filters like grep/date support using a specific field in the event for filtering.

The Grok filter does not support filtering a specific event field.

Gliffy Diagrams

Activity

Show:

Jordan Sissel July 1, 2011 at 11:32 PM

Fixed in 1.0.13

Fixed

Details

Assignee

Reporter

Created May 31, 2011 at 8:50 AM
Updated April 19, 2013 at 8:20 PM
Resolved July 1, 2011 at 11:32 PM