in internal/elasticsearch/ingest/processor_grok_data_source.go [15:108]
func DataSourceProcessorGrok() *schema.Resource {
processorSchema := map[string]*schema.Schema{
"id": {
Description: "Internal identifier of the resource",
Type: schema.TypeString,
Computed: true,
},
"field": {
Description: "The field to use for grok expression parsing",
Type: schema.TypeString,
Required: true,
},
"patterns": {
Description: "An ordered list of grok expression to match and extract named captures with. Returns on the first expression in the list that matches.",
Type: schema.TypeList,
Required: true,
MinItems: 1,
Elem: &schema.Schema{
Type: schema.TypeString,
},
},
"pattern_definitions": {
Description: "A map of pattern-name and pattern tuples defining custom patterns to be used by the current processor. Patterns matching existing names will override the pre-existing definition.",
Type: schema.TypeMap,
Optional: true,
Elem: &schema.Schema{
Type: schema.TypeString,
},
},
"ecs_compatibility": {
Description: "Must be disabled or v1. If v1, the processor uses patterns with Elastic Common Schema (ECS) field names. **NOTE:** Supported only starting from version of Elasticsearch **7.16.x**.",
Type: schema.TypeString,
Optional: true,
ValidateFunc: validation.StringInSlice([]string{"disabled", "v1"}, false),
},
"trace_match": {
Description: "when true, `_ingest._grok_match_index` will be inserted into your matched document’s metadata with the index into the pattern found in `patterns` that matched.",
Type: schema.TypeBool,
Optional: true,
Default: false,
},
"ignore_missing": {
Description: "If `true` and `field` does not exist or is `null`, the processor quietly exits without modifying the document",
Type: schema.TypeBool,
Optional: true,
Default: false,
},
"description": {
Description: "Description of the processor. ",
Type: schema.TypeString,
Optional: true,
},
"if": {
Description: "Conditionally execute the processor",
Type: schema.TypeString,
Optional: true,
},
"ignore_failure": {
Description: "Ignore failures for the processor. ",
Type: schema.TypeBool,
Optional: true,
Default: false,
},
"on_failure": {
Description: "Handle failures for the processor.",
Type: schema.TypeList,
Optional: true,
MinItems: 1,
Elem: &schema.Schema{
Type: schema.TypeString,
ValidateFunc: validation.StringIsJSON,
DiffSuppressFunc: utils.DiffJsonSuppress,
},
},
"tag": {
Description: "Identifier for the processor.",
Type: schema.TypeString,
Optional: true,
},
"json": {
Description: "JSON representation of this data source.",
Type: schema.TypeString,
Computed: true,
},
}
return &schema.Resource{
Description: "Extracts structured fields out of a single text field within a document. See: https://www.elastic.co/guide/en/elasticsearch/reference/current/grok-processor.html",
ReadContext: dataSourceProcessorGrokRead,
Schema: processorSchema,
}
}