Dissect extract to metadata field


(Dave ) #1

Can I tell the dissect filter to extract a field to @metadata?

dissect {
  mapping => {
    "message" => "%{[@metadata][foo]} %{+[@metadata][foo]} %{actual-foo} %{message}"
  }
}

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.