Create a field for a specific line number



I have these logs that have fields and values, except for the 3rd line of every log. Is there something I can do in Logstash that gives the 3rd line a field for that value?

Here is an example of my data in JSON:

---Begin event transaction---\rMay 07 09:14:08 2018\r665\r

I would like it to be this instead:


Thank you for your time.

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.