Skip to content

Conversation

@danhermann
Copy link
Contributor

The grok processor REST endpoint returns the bundled grok patterns in an undetermined order. This PR changes the default behavior to return them in the order in which they were read from disk which preserves the natural grouping of related patterns such as "S3_ACCESS_LOG" and "ELB_URI" for AWS-related patterns though they share no common prefix. An option to return all patterns sorted by key was also added.

Resolves #40819.

Backport of #61671

@danhermann danhermann added >enhancement :Data Management/Ingest Node Execution or management of Ingest Pipelines including GeoIP backport v7.10.0 labels Sep 9, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-core-features (:Core/Features/Ingest)

@elasticmachine elasticmachine added the Team:Data Management Meta label for data/management team label Sep 9, 2020
@danhermann
Copy link
Contributor Author

@elasticmachine run elasticsearch-ci/packaging-sample-windows

@danhermann danhermann merged commit 0b1e217 into elastic:7.x Sep 9, 2020
@danhermann danhermann deleted the backport_7x_61671_sort_grok_patterns branch September 9, 2020 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport :Data Management/Ingest Node Execution or management of Ingest Pipelines including GeoIP >enhancement Team:Data Management Meta label for data/management team v7.10.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants