You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Otto Fowler (JIRA)" <ji...@apache.org> on 2016/11/22 04:14:58 UTC

[jira] [Commented] (METRON-583) Update GROK to 0.1.3 to support conversion in grok patterns

    [ https://issues.apache.org/jira/browse/METRON-583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15685636#comment-15685636 ] 

Otto Fowler commented on METRON-583:
------------------------------------

So, here is the problem:

Grok 0.1.0 - if it could parseInteger, it converted to integer
Grok 0.1.3 - if you specify integer, it converts, if you don't it keeps it as string, thus regression for all of our rules

So this is a lot to chew off.
I have not been able to find anything about a 'breaking change' in java-grok around this.

I would think for compatibly sake, the old behavior would be kept ( if no specifier then if int else string )?

> Update GROK to 0.1.3 to support conversion in grok patterns
> -----------------------------------------------------------
>
>                 Key: METRON-583
>                 URL: https://issues.apache.org/jira/browse/METRON-583
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Otto Fowler
>            Assignee: Otto Fowler
>
> Some users are having problems when passing in strings that are parsable as integer types such as "0003222".
> In this case they want the string "0003222" not 3222.
> The grok pattern language supports type specifications in 0.1.3 which allow you to specify in the pattern that you want it as a string explicitly, such as
> %{USERNAME:namefield;string}
> Metron should update to this version and gain that support.
> 0.1.3 is _not_ the latest version, however, but should be close enough to hopefully not have any regressions



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)