Delete some characters in the line

Elastic Stack Beats
1

Hello!
Can I use the "exclude_lines" option to delete some characters in a string (for example: <14>) if I have "filebeat.prospectors: type - udp"?
If not, how do I delete the fake characters?
Filebeat output:
"<14>{hostname: localhost, level:INFO, message: text}"
Need:
"{hostname: localhost, level:INFO, message: text}"

2

Unfortunately, Filebeat does not support string replacement.

However you could try remove it using ES Ingest node's gsub processor: https://www.elastic.co/guide/en/elasticsearch/reference/master/gsub-processor.html

3

Thank you

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.