Add elapsed filter
Further validate date filter within register method
fix handling of chuncked gelf messages
test for reading chunked gelf messages
Merge branch 'master' of https://github.com/Syntigo-nv/logstash
fix handling of chuncked gelf messages
test for reading chunked gelf messages
Merge branch '1.2.1.fixes' of https://github.com/Syntigo-nv/logstash
Merge branch 'master' of https://github.com/logstash/logstash
Fix a few typos and make docs a bit more readable.
filters: elasticsearch: new filter for querying es

Sometimes it's useful to be able to correlate new events with previous
events (e.g., to calculate time duration between events).  This filter
queries an elasticsearch host to find the top event matching the given
search criteria and copies specific fields from that event into the new
event.

Here's an example that will determine when an operation started and
store that timestamp into the ending event:

   if [type] == "end" {
      elasticsearch {
         hosts => ["es-server"]
         query => "type:start AND operation:%{[opid]}"
         fields => ["@timestamp", "started"]
      }

      date {
         match => ["[started]", "ISO8601"]
         target => "[started]"
      }
   }
Begin converting literal named captures to Grok expressions.
Finished removing literal named captures from Cisco ASA Grok patterns
Fix file output tests (broken by removal of Event::from_json)
Fix SINCEDB_DIR environment variable name
Add EDN codec
Remove unused :charset option for EDN codec
Change insist syntax
[imap] configurable content-type selection for multipart messages

User can now select which content-type in multipart messages should be
used as the event message.  Default behavior for multipart messages is
still to select first part with text/plain content-type.
Ignore the .VERSION.mk file