Struct Grok

#[non_exhaustive]
pub struct Grok {
    pub source: Option<String>,
    pub match: String,
}

This processor uses pattern matching to parse and structure unstructured data. This processor can also extract fields from log messages.

For more information about this processor including examples, see grok in the CloudWatch Logs User Guide.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

source: Option<String>

The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.

match: String

The grok pattern to match against the log event. For a list of supported grok patterns, see Supported grok patterns.

Implementations

impl Grok

pub fn source(&self) -> Option<&str>

The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed.

pub fn match(&self) -> &str

The grok pattern to match against the log event. For a list of supported grok patterns, see Supported grok patterns.

impl Grok

pub fn builder() -> GrokBuilder

Creates a new builder-style object to manufacture Grok.

Trait Implementations

impl Clone for Grok

fn clone(&self) -> Grok

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Grok

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Grok

fn eq(&self, other: &Grok) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Grok