I have multiple GROK match patterns.
e.g.
grok { match => { "message" => [ "GROK Pattern 1", "GROK Pattern 2" ] } }
Do we have anything as patterns_dir for above match patterns.
i.e. patterns_dir => ["/opt/logstash/patterns", "/opt/logstash/extra_patterns"]
This will make my conf file look more cleaner, short and simple to read.
warkolm
(Mark Walkom)
April 13, 2016, 4:11am
2
Yes, that is directly from the docs - Grok filter plugin | Logstash Reference [8.11] | Elastic
patterns_dir => ["/opt/logstash/patterns", "/opt/logstash/extra_patterns"]
This is for patterns_dir. I am asking for multiple grok match patterns.
warkolm
(Mark Walkom)
April 13, 2016, 4:22am
4
Oh right, your use of that in the OP threw me.
No, you cannot.