The logstash events have path field with a value like: /var/log/my-app_1-2015-08-26.0.log I want a filter that can take the path field and create a new field with just the my-app_1 part of the path string My attempt was with the grok & mutate filter but I'm not sure how to used the regex captured …

Add a new field based on a regex capturing group

Topic		Replies	Views
Extract a string from logstash path Kibana	6	4827	January 18, 2018
Basic logstash mutations Logstash	4	577	September 26, 2019
Add new field using part of existing value Logstash	10	1836	June 25, 2020
Create a new field using Regular Expressions Logstash	3	5580	August 7, 2018
Take out bits of a URIPATH in Logstash Logstash	21	4979	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Add a new field based on a regex capturing group

Related topics