Changing field Name

Hi everybody,

I am getting a field name and value like this:
How_to_configure_outlook_SOP_name:How to configure outlook
How_to_enable_macros_SOP_name: How to enable macros.

e.g. (anything)_SOP_name:value
I put all the values in right side in one field called SOP_name at logstash level.

but I want it like this:
SOP_name:How to configure outlook
SOP_name: How to enable macros

Thanks in advance.

Anybody have any idea about this? #kibana

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.