Class LogsGrokParser

Create custom grok rules to parse the full message or a specific attribute of your raw event. For more information, see the parsing section.

Hierarchy

  • LogsGrokParser

Constructors

constructor

Properties

additionalProperties? grok isEnabled? name? samples? source type

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

grok

grok: LogsGrokParserRules

Set of rules for the grok parser.

Optional isEnabled

isEnabled?: boolean

Whether or not the processor is enabled.

Optional name

name?: string

Name of the processor.

Optional samples

samples?: string[]

List of sample logs to test this grok parser.

source

source: string

Name of the log attribute to parse.

type

type: LogsGrokParserType

Type of logs grok parser.

Settings

Member Visibility

Theme

Generated using TypeDoc