search

fkie-cad / Logprep

log data pre processing, generation and shipping in python
https://logprep.readthedocs.io/en/latest/
GNU Lesser General Public License v2.1
27 stars 7 forks source link

Add fuzzy filter logic to filter expressions #552

Open ekneg54 opened 5 months ago

ekneg54 commented 5 months ago

https://www.elastic.co/guide/en/elasticsearch/reference/8.12/query-dsl-query-string-query.html#query-string-fuzziness

we should implement this feature in favor of multiline regex support to address the same use cases. multiline regex would be to expensive during prozessing logs. this could be a simple string lookup in a json document?

ekneg54 commented 5 months ago

our used luqum library supports this Expression