Create a new field from Message

(Sameer Panicker) #1

[method : GET] [requestUri : https://myhost:4433/MyService/api/products/34221/availability/locationId/11111] [reasonPhrase : OK]

This is the text which I receive under the Message field after searching. Is there a way I can create a new field called Method, URI and StatusCode and get the values.

(Mark Walkom) #2

Not in Kibana, you need to do it before it gets into Elasticsearch.

(Sameer Panicker) #3

Could you please share a ref. link for implementimg this ?

(Mark Walkom) #4

(michaelshi) #5

In logstash , you can add filter for processing

filter {
mutate { add_field => { "Method" => regexpr expressions } }

(system) #6