Grok filter EMAILADDRESS no worky if it starts with a number

if you have an email address like "" that starts with a number and not a letter, the %{EMAILADDRESS:email} filter won't work.

The regex in EMAILLOCALPART needs to have 0-9 added

EMAILLOCALPART [a-zA-Z][a-zA-Z0-9_.+-=:]+


EMAILLOCALPART [a-zA-Z0-9][a-zA-Z0-9_.+-=:]+

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.