I would use dissect to parse the beginning of the line, something like this. Then use a json filter to parse the rest of the line.
I would use dissect to parse the beginning of the line, something like this. Then use a json filter to parse the rest of the line.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.