Add support for fieldname to the Grok filter
Description
Gliffy Diagrams
Activity
Show:
Jordan Sissel July 1, 2011 at 11:32 PM
Fixed in 1.0.13
Fixed
Details
Details
Assignee
Jordan Sissel
Jordan SisselReporter
Evgeny Zislis
Evgeny ZislisCreated May 31, 2011 at 8:50 AM
Updated April 19, 2013 at 8:20 PM
Resolved July 1, 2011 at 11:32 PM
The json format in an input module allows to create multiple fields in the event,
and some filters like grep/date support using a specific field in the event for filtering.
The Grok filter does not support filtering a specific event field.