Can we specify other data type in grok processor in the future?


(jiangguoqiang) #1

Hi.
Ingest node is a elegant solution for ingest data. When specify a grok pattern, I have a little trouble.

The syntax for reusing a grok pattern comes in three forms: %{SYNTAX:SEMANTIC}, %{SYNTAX}, %{SYNTAX:SEMANTIC:TYPE}. TYPE is the type you wish to cast your named field, but only int and float are currently supported for coercion.

I wonder that If TYPE have plan to support other data type in the future? Or have other elegant way in which I can specify data type for fields?


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.