問題文
An engineer writes a Grok rule that extracts the first two fields of a line and leaves the long remainder untouched, and the rule never matches. Which statement describes the requirement being missed?
選択肢
- Each parsing rule is applied across one whole entry in the processor configuration, so the written rule must span parts and the trailing remainder needs an explicit matcher.
- Each parsing rule is applied across one whole entry in the processor configuration, so the written rule must span parts and the trailing remainder needs an assumed matcher.
- Each parsing rule is applied across one whole entry in the processor configuration, so the written rule must span everything and the trailing remainder needs an explicit matcher.
- Each parsing rule is applied across one whole entry in the processor configuration, so the written rule must span everything and the trailing remainder needs an assumed matcher.