Combining 2 fields in logstash

Elastic Stack Logstash
1

I have been trying to combine 2 fields in logstash.
My first clickstream log contains {x=y, software=DEMO, language=EN} as a parameter.
My second log contains clickstream log {a=b, projectId=DEMO, language=EN} as a parameter.

I want to make a single field called software_used that contains value of software and projectId.
Someone plz help me with this.

2

Hi,

you can grok it to get rid of the curly brackets and then use the kv filter:
https://www.elastic.co/guide/en/logstash/current/plugins-filters-kv.html

after this you can use the mutate filter to combine these as you want.
https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html