From 325e7f147622e72938f6d57ba636dc1023201a23 Mon Sep 17 00:00:00 2001 From: Israel Ekpo Date: Mon, 31 Mar 2014 23:03:24 -0400 Subject: [PATCH] Update TODO.md --- TODO.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/TODO.md b/TODO.md index 3879cfd..1f7e1e5 100644 --- a/TODO.md +++ b/TODO.md @@ -24,17 +24,17 @@ grok.override = false grok.patterns_dir = /home/user/grok/dictionaries # Configuration for Individual Expressions -grok.entries.1.source = @body -grok.entries.1.expression = %{INT:year} Copy Data from Integery -grok.entries.1.override = true +grok.entries.0.source = @body +grok.entries.0.expression = %{INT:year} Copy Data from Integery +grok.entries.0.override = true grok.entries.1.source = dataOrigin grok.entries.1.expression = %{IP:ip_address} Rest of the Data grok.entries.1.override = false -grok.entries.1.source = timeField -grok.entries.1.expression = %{DATETIME:original_datetime} Rest of the Data -grok.entries.1.override = true +grok.entries.2.source = timeField +grok.entries.2.expression = %{DATETIME:original_datetime} Rest of the Data +grok.entries.2.override = true ```