Hello I would to like to know why my "add_field" option doesn"t replace my "NEWFIELD" field ? : if ([ID2] == "000003") { grok { match => { "DESCRIPTION" => [ "%{DATA:TEST}/%{WORD:NOM_BATCH}-%{BASE16NUM:DATE_BATCH}-%{GREEDYDATA:RESTE}" ] } } mutate { copy => { "…

If you get %{ESSAI} it means the ESSAI field wasn't set.

Add_field never replace my field

system (system) Closed July 13, 2018, 1:39pm 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Logstash add_field Logstash	7	40467	July 6, 2017
Logstash add_field issue Logstash	4	299	July 15, 2019
Logstash New Field is not added Logstash	4	400	August 2, 2019
Assigning value to add_field new field Logstash	4	24066	July 6, 2017
Add Nested Field Value to a new field using Logstash Filter Logstash	7	2505	July 27, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Add_field never replace my field

Related topics