Skip to content

Commit 355727a

Browse files
committed
Note that grok ingest processor patterns are not anchored
Signed-off-by: James Beckett <[email protected]>
1 parent 624428c commit 355727a

File tree

1 file changed

+2
-0
lines changed
  • _ingest-pipelines/processors

1 file changed

+2
-0
lines changed

_ingest-pipelines/processors/grok.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,8 @@ For a list of available predefined patterns, see [Grok patterns](https://github.
2121

2222
The `grok` processor is built on the [Oniguruma regular expression library](https://github.com/kkos/oniguruma/blob/master/doc/RE) and supports all the patterns from that library. You can use the [Grok Debugger](https://grokdebugger.com/) tool to test and debug your grok expressions.
2323

24+
Note that patterns are *not anchored* - for performance and reliability it is advisable to include at least a start-of-line anchor (`^`)
25+
2426
## Syntax
2527

2628
The following is the basic syntax for the `grok` processor:

0 commit comments

Comments
 (0)