grok

Documentation

Index

• type MatchResult
• type ProcessorGrok
  • func (*ProcessorGrok) Description() string
  • func (p *ProcessorGrok) Init(context pipeline.Context) error
  • func (p *ProcessorGrok) ProcessLogs(logArray []*protocol.Log) []*protocol.Log

Types

type MatchResult

type MatchResult int64

type ProcessorGrok

type ProcessorGrok struct {
	CustomPatternDir    []string          // The paths of the folders where the custom GROK patterns are located. Processor_grok will read all the files in the folder. Doesn't support hot reload
	CustomPatterns      map[string]string // Custom GROK patterns, key is pattern's name and value is grok expression
	SourceKey           string            // Target field, default is "content"
	Match               []string          // Grok expressions to match logs
	TimeoutMilliSeconds int64             // Maximum attempt time in milliseconds to parse grok expressions, set to 0 to disable timeout, default is 0
	IgnoreParseFailure  bool              // Whether to keep the original field after parsing failure，default is true. Configured to false to discard the log when parsing fails.
	KeepSource          bool              // Whether to keep the original field after parsing success, default is true
	NoKeyError          bool              // Whether to report an error if there is no matching original field, default is false
	NoMatchError        bool              // Whether to report an error if all expressions in Match do not match, default is false
	TimeoutError        bool              // Whether to report an error if the match timeout, default is false
	// contains filtered or unexported fields
}

func (*ProcessorGrok) Description

func (*ProcessorGrok) Description() string

func (*ProcessorGrok) Init

func (p *ProcessorGrok) Init(context pipeline.Context) error

Init called for init some system resources, like socket, mutex...

func (*ProcessorGrok) ProcessLogs

func (p *ProcessorGrok) ProcessLogs(logArray []*protocol.Log) []*protocol.Log