Github user justinleet commented on the issue:
https://github.com/apache/incubator-metron/pull/281
+1.
Ran up in quick dev and both functions look good.
Two notes to anyone testing this:
1. it's actually GROK_EVAL, not GROK_APPLY like in the PR description.
2. The example depends on METRON-456, but the functions work independently
of that being pulled in. I just used a couple examples on the fly, and used
the standard squid pattern + a couple entries from the log for GROK_EVAL.
GROK_PREDICT will take anything.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
