Can dissect use a variable number of fields?

joaociocca · September 26, 2019, 11:47pm

Final configuration file! Thanks @Badger and @Christian_Dahlqvist

gist.github.com

https://gist.github.com/joaociocca/d70178c85ea6366e1475312ff288056c

ias_history.conf

# Using information from:
# - https://iso.csusb.edu/tools/nps-log-interpreter
# - https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd197432(v=ws.10)?redirectedfrom=MSDN
# - http://www.gnu.org/software/radius/manual/html_node/radius_181.html#SEC300
# - https://discuss.elastic.co/t/can-dissect-use-a-variable-number-of-fields/200952/11

input {
	stdin { }
}

This file has been truncated. show original

Topic		Replies	Views
Newbie Issue with multiple dissects Logstash	3	291	March 20, 2019
Hybrid Grok and Dissect Parsing Logstash	3	342	November 29, 2021
Is it possible to include regex in dissect filter? Logstash	5	1714	August 1, 2018
Logstash conditionals Logstash	4	541	September 5, 2017
How to dissect/script/grok a long number into different fields using regex in an ingest pipeline? Kibana ingest-pipeline	3	448	April 24, 2022

Can dissect use a variable number of fields?

Related topics