gcp Google Cloud release notes ·

Google SecOps Grok Filter Gains `match_all` Option in Parser Syntax

securitygcpengineer
feature

Google SecOps has updated its parser syntax to support a `match_all` option within the Grok filter. This enhancement enables parsers to extract all non-overlapping pattern occurrences within a field. Previously, the filter only returned the first match, making this a significant improvement for comprehensive data extraction. The change primarily affects security engineers and analysts who configure and use Google SecOps parsers.

Features (1)
  • Google SecOps Grok filter match_all option in parser syntax

    Grok filter match_all option in parser syntax The Google SecOps parser syntax is updated to support the match_all option within the Grok filter. This allows parsers to extract all non-overlapping pattern occurrences within a field, rather than returning only the first match. For more information, see Parser syntax reference .

Read the original announcement →

https://docs.cloud.google.com/release-notes#September_15_2026

Related releases