Create a new field from Message


(Sameer Panicker) #1

[method : GET] [requestUri : https://myhost:4433/MyService/api/products/34221/availability/locationId/11111] [reasonPhrase : OK]

This is the text which I receive under the Message field after searching. Is there a way I can create a new field called Method, URI and StatusCode and get the values.


(Mark Walkom) #2

Not in Kibana, you need to do it before it gets into Elasticsearch.


(Sameer Panicker) #3

Could you please share a ref. link for implementimg this ?


(Mark Walkom) #4

https://www.elastic.co/guide/en/logstash/current/index.html


(michaelshi) #5

In logstash , you can add filter for processing

filter {
mutate { add_field => { "Method" => regexpr expressions } }
}


(system) #6