Hello, We are collecting some server metric using cmkbeat agent. The output is available in following format: perf_data: heap=8308.406693;15045.98125;15837.875;;15837.875 nonheap=582.264664;0;0;;0 perf_data: generic_number=4;80;90;; perf_data: sessions=6338;10000;20000;; The goal is to have fo…

this solved our issues. At the end we renamed the original field "metrics" to "cmk_metrics", because of the fields removal. ruby { code => ' event.get("metrics").each { |k, v| event.set("cmk_beat",v) } event.remove("metrics") ' }

Discuss the Elastic Stack

Event parsing - perf_data from cmkbeat

Elastic Stack Logstash

Badger February 20, 2020, 3:12pm 3

You could do it in ruby. Something similar (but not the same) as this.

Topic		Replies	Views
Metrics plugin -> how to copy fields from source event? Logstash	2	500	July 6, 2017
Create custom metricbeat fields Beats metricbeat	3	673	May 27, 2019
Logstash grok to match the metricbeat type and add field Logstash	9	4490	April 4, 2018
Creating metrics from a filebeat input Logstash	1	280	May 31, 2020
Grok - how to add field with values from existing fields? Logstash	6	7871	February 3, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Event parsing - perf_data from cmkbeat

Related topics