github-mirrors/logstash
1
0
Fork 0
mirror of https://github.com/elastic/logstash.git synced 2025-04-24 06:37:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

add grok named_captures_only config option

Browse source
This commit is contained in:
Pete Fritchman 2011-05-27 15:34:30 -07:00
parent c48efe849c
commit 4ce85e1fc8
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
lib/logstash/filters/grok.rb
View file

@ -51,6 +51,9 @@ class LogStash::Filters::Grok < LogStash::Filters::Base
# requested in: googlecode/issue/26
config :drop_if_match, :validate => :boolean, :default => false
# If true, only store named captures from grok.
config :named_captures_only, :validate => :boolean, :default => false
# Detect if we are running from a jarfile, pick the right path.
@@patterns_path ||= Set.new
if __FILE__ =~ /file:\/.*\.jar!.*/
@ -158,6 +161,11 @@ class LogStash::Filters::Grok < LogStash::Filters::Base
next
end
if @named_captures_only && key.upcase == key
@logger.debug("Skipping capture '#{key}' since it is not a named capture and named_captures_only is true.")
next
end
if event.fields[key].is_a?(String)
event.fields[key] = [event.fields[key]]
elsif event.fields[key] == nil