Hi,
I am trying to apply grok filter on kafka key but it is not getting parsed.
grok {
match => ['key', '%{IP:NodeIP}%{DATA:}%{IP:Ip2}']
}
I cant see these fields getting created.
Thank you!
Hi,
I am trying to apply grok filter on kafka key but it is not getting parsed.
grok {
match => ['key', '%{IP:NodeIP}%{DATA:}%{IP:Ip2}']
}
I cant see these fields getting created.
Thank you!
So what does the resulting event look like? Use a stdout { codec => rubydebug }
output to get a raw dump of the event.
Where's the field name after "DATA:"?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.