Convert an inner field using regex for the field name

Elastic Stack Logstash
1

Hi,

For my json events processing, I need the mutate filter with convert, for inner fields with a name format such as:

filter {
mutate {
convert => {
"[additionalData][contentCount_1]" => "integer"
"[additionalData][contentCount_2]" => "integer"
"[additionalData][contentCount_3]" => "integer"
}
}
}

I look up for a way to use regex for this field name, to make it more dynamic. I don't know in advance how many additionalData.contentCount_* fields will be included in the event.
Is there any syntax for this? I'd really appreciate avoiding ruby script...

Thanks.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.