Tal Levy 04b712bdc5 fix trace_match behavior for when there is only one grok pattern (#21413)
There is an issue in the Grok Processor, where trace_match: true does not inject the _ingest._grok_match_index into the ingest-document when there is just one pattern provided. This is due to an optimization in the regex construction. This commit adds a check for when this is the case, and injects a static index value of "0", since there is only one pattern matched (at the first index into the patterns).

To make this clearer, more documentation was added to the grok-processor docs.

Fixes #21371.
2016-11-16 15:41:54 +02:00
..
2016-10-10 14:51:47 -06:00
2016-11-16 09:52:08 +01:00
2016-11-15 12:17:26 -05:00
2016-09-21 09:36:21 -04:00
2016-10-28 14:50:46 +02:00
2016-10-11 12:21:46 +02:00
2016-07-07 14:44:03 -04:00