5 ms·
Perhaps because many devs, like me, haven't heard of "grok patterns"[0] before. Because of that, it took me a while to understand what your post was saying, si
by pimlottc 4y ago
Perhaps because many devs, like me, haven't heard of "grok patterns"[0] before. Because of that, it took me a while to understand what your post was saying, since I was reading "grok" as a normal word.
It's not a bad idea, though you'd want to make it a more formal standard; since it's just used internally in one project, it may be subject to change based on that project's own needs. There could also be more documentation, showing examples of strings that are accepted and not accepted by each pattern, as well as advice for generating compliant strings.
0: https://logz.io/blog/logstash-grok/ https://logz.io/blog/logstash-grok/
- mekster 4y agoIt may have originated from a project but many other log parser projects such as Vector and fluentd have such support. https://vector.dev/docs/reference/vrl/examples/#parse_grok https://vector.dev/docs/reference/vrl/examples/#parse_grok https://github.com/fluent/fluent-plugin-grok-parser https://github.com/fluent/fluent-plugin-grok-parser