Create a field for a specific line number

Elastic Stack Logstash
1

Hello,

I have these logs that have fields and values, except for the 3rd line of every log. Is there something I can do in Logstash that gives the 3rd line a field for that value?

Here is an example of my data in JSON:

---Begin event transaction---\rMay 07 09:14:08 2018\r665\r

I would like it to be this instead:

EventID:665

Thank you for your time.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.