Can I tell the dissect filter to extract a field to @metadata?
dissect {
mapping => {
"message" => "%{[@metadata][foo]} %{+[@metadata][foo]} %{actual-foo} %{message}"
}
}
Can I tell the dissect filter to extract a field to @metadata?
dissect {
mapping => {
"message" => "%{[@metadata][foo]} %{+[@metadata][foo]} %{actual-foo} %{message}"
}
}
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.