elastic/logstash

Grok custom pattern problem (Can't start with a number) - Logstash 1.5

Open

#3,353 opened on 2015年6月1日

GitHub で見る
 (0 comments) (0 reactions) (0 assignees)Ruby (3,496 forks)batch import
bughelp wanted

Repository metrics

Stars
 (14,197 stars)
PR merge metrics
 (平均マージ 4d 19h) (30d で 50 merged PRs)

説明

Hi,

it was previously OK with Logstash 1.4.2 it now BUG with Logstash 1.5

My pattern file contain a grok pattern with a name starting with a number

Step to reproduce :

1 - Add this pattern to grok patterns :

  • 123_DATE %{YEAR:123_date}
  • YEAR_DATE %{YEAR:year_date}

2 - Start Logstash with the following commands :

  • ./logstash agent -e 'filter { grok { match => ["message","%{123_DATE:year}"] } }'
  • ./logstash agent -e 'filter { grok { match => ["message","%{YEAR_DATE:year}"] } }'

3 - RESULTS

  • Logstash 1.4.2
    • Logstash 1.5

Please correct this or just write it somewhere in red inside the documentation.

EDIT : Please note that a name like this : DATE_123_CUSTOM is ok because the name is not starting with a number. (I've just made the test)

M0dM

コントリビューターガイド