elastic / dissect-specification

specification for the dissect parser
Apache License 2.0
2 stars 2 forks source link

How to specify multiple patterns to process for a source string. #9

Open guyboertje opened 6 years ago

guyboertje commented 6 years ago

To prevent requiring the user to use conditional branches we should be able to specify multiple patterns to apply to the same source field.

Currently the spec is silent on the number of patterns per field source and only deals with the specification of the prefixes and suffixes of the field definition itself but not the broader scope of functionality.

Prior discussion: https://github.com/logstash-plugins/logstash-filter-dissect/issues/56