docs: remove mention of file based grok pattern

This commit is contained in:
Martijn van Groningen 2016-04-13 22:51:12 +02:00
parent 3d5def0789
commit 16fa3e546e
1 changed files with 2 additions and 3 deletions

View File

@ -920,9 +920,8 @@ expression that supports aliased expressions that can be reused.
This tool is perfect for syslog logs, apache and other webserver logs, mysql logs, and in general, any log format
that is generally written for humans and not computer consumption.
The processor comes packaged with over 120 reusable patterns that are located at `$ES_HOME/config/ingest/grok/patterns`.
Here, you can add your own custom grok pattern files with custom grok expressions to be used by the processor.
This processor comes packaged with over
https://github.com/elastic/elasticsearch/tree/master/modules/ingest-grok/src/main/resources/patterns[120 reusable patterns].
If you need help building patterns to match your logs, you will find the <http://grokdebug.herokuapp.com> and
<http://grokconstructor.appspot.com/> applications quite useful!