Update patterns/grok-patterns

Fix the hour pattern to accept single digit hours, fixes an issue with timestamps like that: "2013-02-21 6:23:46"
trentluo · Feb 21, 2013 · 9d26770 · 9d26770
1 parent 541e914
commit 9d26770
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/patterns/grok-patterns b/patterns/grok-patterns
@@ -61,7 +61,7 @@ YEAR (?>\d\d){1,2}
 # I'm still on the fence about using grok to perform the time match,
 # since it's probably slower.
 # TIME %{POSINT<24}:%{POSINT<60}(?::%{POSINT<60}(?:\.%{POSINT})?)?
-HOUR (?:2[0123]|[01][0-9])
+HOUR (?:2[0123]|[01]?[0-9])
 MINUTE (?:[0-5][0-9])
 # '60' is a leap second in most time standards and thus is valid.
 SECOND (?:(?:[0-5][0-9]|60)(?:[:.,][0-9]+)?)