Здравствуйте! Есть необходимость парсить csv фильтром то, что не распарсил grok. Я сделал конфиг: filter { if "ise" in [tags] and ([message] !~ "NetworkDeviceName=ASA1-VPN" and [message] !~ "NetworkDeviceName=ASA2-VPN") { drop { } } if "ise" in [tags] { grok { patterns_dir =>…

То есть нужно вот так: csv { source => "message2" separator => "," autodetect_column_names => "true" }

Применение csv фильтра после grok

Elastic In Your Native Tongue Вопросы на русском языке

Igor_Motov (Igor Motov) January 29, 2020, 6:19pm 13

Как вы этот вывод получили?

Topic		Replies	Views
Add (;) sépartor in csv file before analysing it Logstash	5	441	February 8, 2017
Grok or CSV? Logstash	3	1545	January 10, 2017
Using grok instead of csv filter Logstash	2	1485	March 18, 2017
How should I configure the date filter? Logstash	11	2273	July 6, 2017
Simple parsing in logstash Logstash	8	591	April 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Применение csv фильтра после grok

Related topics