I'm checking https://github.com/elastic/elasticsearch/blob/6.6/libs/grok/src/main/resources/patterns/grok-patterns and I see that EMAILLOCALPART supposes that the local part of an email must be at least 2 characters long and must begin with a latin character. The only restriction I see here https://en.wikipedia.org/wiki/Email_address#Local-part is that it cannot start or end with the . character and that it must not be longer than 64 characters (which is also not checked by the existing regex). Which standard is this pattern based on?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.