Adding a field while parsing for kibana

Elastic Stack Beats
1

Here is something i do to get java exceptions in fluentd is this possible in filebeat?
thanks
<filter raw.kubernetes.**>
@type record_transformer
enable_ruby

exception ${record["log"][/(java.[a-zA-Z]+.[a-zA-Z]+Exception)/m,1] || 'non-java'}

2

Hi @Soumitra_Ghosh,

I am not sure what field you are adding with this fluentd configuration, but with filebeat you can add fields using the fields option of the log input, the add_fields processor. Or, if you are using an ingest pipeline to parse logs with the set processor.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.