Adding a field while parsing for kibana

Here is something i do to get java exceptions in fluentd is this possible in filebeat?
thanks
<filter raw.kubernetes.**>
@type record_transformer
enable_ruby

exception ${record["log"][/(java.[a-zA-Z]+.[a-zA-Z]+Exception)/m,1] || 'non-java'}

Hi @Soumitra_Ghosh,

I am not sure what field you are adding with this fluentd configuration, but with filebeat you can add fields using the fields option of the log input, the add_fields processor. Or, if you are using an ingest pipeline to parse logs with the set processor.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.