aligning syntax
This commit is contained in:
parent
d8931a832e
commit
83da0e80da
|
@ -169,14 +169,12 @@ When choosing this path there are multiple issues you need to be aware of:
|
||||||
|
|
||||||
The biggest issue with this approach is that it is very very hard to handle multi-line log messages if there are significantly different log syntaxes in the log.
|
The biggest issue with this approach is that it is very very hard to handle multi-line log messages if there are significantly different log syntaxes in the log.
|
||||||
|
|
||||||
|
|
||||||
__Warning:__ Be aware that the multiline parser continues to store log messages in a buffer until it matches another firstline token and when it does it then it packages and emits the multiline log it collected.
|
__Warning:__ Be aware that the multiline parser continues to store log messages in a buffer until it matches another firstline token and when it does it then it packages and emits the multiline log it collected.
|
||||||
This approach is useful when you have good control and know-how about the format of your log source.
|
This approach is useful when you have good control and know-how about the format of your log source.
|
||||||
|
|
||||||
## Order & Chaos
|
## Order & Chaos
|
||||||
Introducing Grok!
|
Introducing Grok!
|
||||||
|
|
||||||
|
|
||||||
Slowly but surely getting all your different syntaxes, for which you will have to define different regular expressions, will make your config file look very messy, filled with regex-es that are longer and longer, and just relying on the multiple format lines to split it up doesn't bring that much readability nor does it help with maintainability. Reusability is something that we cannot even discuss in the case of pure regex formatters.
|
Slowly but surely getting all your different syntaxes, for which you will have to define different regular expressions, will make your config file look very messy, filled with regex-es that are longer and longer, and just relying on the multiple format lines to split it up doesn't bring that much readability nor does it help with maintainability. Reusability is something that we cannot even discuss in the case of pure regex formatters.
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue