Combine parsed fields

[Adrian_Martin]

add_field => { "host_device_name" => "%{host} %{fs.device_name}" }

gives me host_device_name:"my-machine %{fs.device_name}"

How/Can I referfence the already parsed values?

[Christian_Dahlqvist]

@Adrian_Martin

add_field => { "host_device_name" => "%{host} %{fs.device_name}" }

I don't think you can use dot notation there. Try the following instead:

add_field => { "host_device_name" => "%{host} %{[fs][device_name]}" }

[Adrian_Martin]

Thanks that worked.