metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark De Rijk <>
Subject Re: Develop some parsers
Date Fri, 07 Apr 2017 06:10:49 GMT
Dear all,

I am a heavy arcsight user and I have written quite a few parsers over time.
I am new to contributing to open source projects however. 
@Ali, would you like to cooperate on development of some parsers?

Kind Regards,
Mark de Rijk

> On 7 Apr 2017, at 04:30, Ali Nazemian <> wrote:
> Hi all,
> We are going to develop some parsers and have some contribution to the
> community as a start point. I was wondering what the reason is behind
> choosing Grok statements for some of the implementations and Java regex for
> other ones? Is there any policy for that? Probably it would be better to
> have the Java regex implementation due to performance concerns. However, I
> am sure there is a reason that some of them have been implemented with
> using Grok statements.
> Regards,
> Ali

View raw message