Converting field with HEX value to ASCII

Elastic Stack Logstash
1

I have a dump file of JSON documents where many of the fields are in HEX. I want to import this into Elasticsearch using Logstash. Can Logstash convert HEX fields to ASCII?

Thanks,

Glenn

2

Not by itself, no.

3

There's no built-in filter for this but it should be easy to do with a ruby filter and some custom Ruby code.

4

Or if you built a filter it'd be an awesome community resource :slight_smile:

5

Does it exists yet? Help me out, Im will make this plugin! How can I begin?

6

Forget it, I found IT: https://www.elastic.co/guide/en/logstash/current/_how_to_write_a_logstash_input_plugin.html

7

I found a simple way if you are just doing double quotes. the trick is using single quotes around the double quote for replace

mutate {
gsub => ["request", "\x22", '"']
}