Dissect FILEPATH

[frnklnfrancis (Franklin Francis)]

Hi,
I'm pretty new to this, can someone help me to dissect the below file path?

(_LQ3zMFgBEee5Sr7bPizxug) /com.ti.b.ld.nr.ee.kb.tiontion.jar/src/main/java/com/nk/fiswoa/sb/desk/del/SBBdDkWhLtDO.java

I only want the last part of the log to be printed, which in this case is: .java

It can sometimes even be .property

Using mutate or dissesct.

Thanks

[Badger]

@frnklnfrancis

(_LQ3zMFgBEee5Sr7bPizxug) /com.ti.b.ld.nr.ee.kb.tiontion.jar/src/main/java/com/nk/fiswoa/sb/desk/del/SBBdDkWhLtDO.java

It could be done using mutate

mutate { gsub => [ "message", ".*\.", "" ] }

but if I had to do it I would use grok

grok { match => [ "message", "\.%{WORD:extension}$" ] }