Applying grok filter to Kakfa.key

Hi,

I am trying to apply grok filter on kafka key but it is not getting parsed.
grok {
match => ['key', '%{IP:NodeIP}%{DATA:}%{IP:Ip2}']
}

I cant see these fields getting created.
Thank you!

So what does the resulting event look like? Use a stdout { codec => rubydebug } output to get a raw dump of the event.

Where's the field name after "DATA:"?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.