Open
Description
openedon Jan 4, 2023
Grok processor can change the pattern's repository, allowing the use of ECS-compatible patterns or the default ones. On the other hand, the Grok Debugger lacks the option to indicate whether the tested pattern should be ECS-compatible or not. This can confuse the customer (check issue elastic/elasticsearch#92072, making them think that the patterns are unavailable.
The Grok Debugger UI should allow to indicate the ECS version ("v1/v8/disabled") when testing patterns
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment