Convert an inner field using regex for the field name


For my json events processing, I need the mutate filter with convert, for inner fields with a name format such as:

filter {
mutate {
convert => {
"[additionalData][contentCount_1]" => "integer"
"[additionalData][contentCount_2]" => "integer"
"[additionalData][contentCount_3]" => "integer"

I look up for a way to use regex for this field name, to make it more dynamic. I don't know in advance how many additionalData.contentCount_* fields will be included in the event.
Is there any syntax for this? I'd really appreciate avoiding ruby script...


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.