- Minor typos in docs examples #176
- Clarify the definition of matches that depend on previous captures #169
- Added preview of ECS v8 support using existing ECS v1 implementation #175
-
Feat: ECS compatibility support #162
The filter supports using built-in pattern definitions that are fully Elastic Common Schema (ECS) compliant.
- Added: added target support #156
- Added: support for timeout_scope #153
- Fix formatting for code sample #148
- Changed timeout handling using the Timeout class #147
- Added info and link to documentation for logstash-filter-dissect as another option for extracting unstructured event data into fields #144
- Fixed memory leak when run on JRuby 1.x (Logstash 5.x) #135
- Fixed resource leak where this plugin might get double initialized during plugin reload, leaking a thread + some objects
- Fix a potential race
- Major performance improvements due to reduced locking
- version yanked due to breaking changes within .patch release cause logstash crashes in < 5.6
- Update gemspec summary
- Fix some documentation issues
- Fix subdirectories in a pattern folder causing an exception in some cases
- Add option to define patterns inline in the filter using
pattern_definitions
configuration.
- Docs: indicate that grok patterns are loaded when the pipeline is created
- Allow timeout enforcer to be disabled by setting timeout_millis to nil
- Change default timeout_millis to 30s
- Fix mutex interruption bug that could crash logstash. See: #97
- No longer use 'trace' log level as it breaks rspec
- Fix race conditions in timeout enforcer
- Move one log message from info to debug to avoid noise
- Fix race condition in TimeoutEnforcer that could cause crashes
- Fix shutdown code to close cleanly and properly close the enforcer
- Add new timeout options to cancel grok execution if a threshold time is exceeded
- Relax constraint on logstash-core-plugin-api to >= 1.60 <= 2.99
- Added metrics for failed, matched and number of patters per field.
- breaking,config: Remove deprecated config
singles
. - breaking,config: Remove deprecated config
pattern
. Please usematch => { "message" => ""}
syntax.
- internal: Republish all the gems under jruby.
- internal,deps: Update the plugin to the version 2.0 of the plugin api, this change is required for Logstash 5.0 compatibility. See elastic/logstash#5141
- internal,deps: Depend on logstash-core-plugin-api instead of logstash-core, removing the need to mass update plugins on major releases of logstash
- internal,deps: New dependency requirements for logstash-core for the 5.0 release
- internal: fix fieldref assignment to avoid assumption on mutable object
- internal: Plugins were updated to follow the new shutdown semantic, this mainly allows Logstash to instruct input plugins to terminate gracefully, instead of using Thread.raise on the plugins' threads. Ref: elastic/logstash#3895
- internal,deps: Dependency on logstash-core update to 2.0