Laurence Jones
|
424215f228
|
Add ParseKV helper and rework UnmarshalJSON as a proper helper (#2184)
|
2023-05-12 09:43:01 +02:00 |
|
Thibault "bui" Koechlin
|
6fb962a941
|
Allow parsers to capture data for future enrichment (#1969)
* Allow parsers to capture data in a cache, that can be later accessed via expr helpers (fake multi-line support)
|
2023-01-11 15:01:02 +01:00 |
|
blotus
|
fdda940ac0
|
Add Kubernetes audit acquisition (#1767)
|
2022-12-06 13:47:29 +01:00 |
|
Thibault "bui" Koechlin
|
7f0cac8ee6
|
add support for 'expression' (fix #822) in grok patterns (#830)
* add support for 'expression' (fix #822) in grok patterns
* add tests
|
2021-06-21 09:07:33 +02:00 |
|
AlteredCoder
|
3801dcc277
|
fix parser tests
|
2020-08-23 23:34:12 +02:00 |
|
erenJag
|
44304a30e7
|
fix #124 (#127)
* fix #124
|
2020-07-09 12:41:18 +02:00 |
|
Thibault bui Koechlin
|
7657a0cc37
|
fix non unique grok name
|
2020-05-28 11:28:49 +02:00 |
|
Thibault bui Koechlin
|
7557ce8156
|
add 'in File(...)' tests for parsers and leakybuckets
|
2020-05-28 11:28:49 +02:00 |
|
Thibault bui Koechlin
|
6cb5ec0460
|
add a parser unit test using the 'in File(...)' construct
|
2020-05-28 11:28:49 +02:00 |
|
Thibault bui Koechlin
|
88c72340e3
|
unique pattern names
|
2020-05-24 12:44:33 +02:00 |
|
Thibault bui Koechlin
|
d601e21afb
|
working tests for json
|
2020-05-23 13:22:43 +02:00 |
|
Thibault bui Koechlin
|
32f32b41c7
|
add json support via expr helpers
|
2020-05-22 18:12:33 +02:00 |
|
Thibault bui Koechlin
|
2016167654
|
initial import
|
2020-05-15 11:39:16 +02:00 |
|