GrokProcessorDescriptor<T>
public class GrokProcessorDescriptor<T> : ProcessorDescriptorBase<GrokProcessorDescriptor<T>, IGrokProcessor>, IGrokProcessor, IProcessor
public GrokProcessorDescriptor()
The field to use for grok expression parsing
If true and Field does not exist or is null,
the processor quietly exits without modifying the document. Default is false
public GrokProcessorDescriptor<T> PatternDefinitions(Func<FluentDictionary<string, string>, FluentDictionary<string, string>> patternDefinitions)
A map of pattern-name and pattern tuples defining custom patterns
to be used by the current processor. Patterns matching existing
names will override the pre-existing definition.
An ordered list of grok expression to match and extract named captures with.
Returns on the first expression in the list that matches.
An ordered list of grok expression to match and extract named captures with.
Returns on the first expression in the list that matches.
when true, _ingest._grok_match_index will be inserted into your matched document’s
metadata with the index into the pattern found in patterns that matched.