Hello, We are collecting some server metric using cmkbeat agent. The output is available in following format: perf_data: heap=8308.406693;15045.98125;15837.875;;15837.875 nonheap=582.264664;0;0;;0 perf_data: generic_number=4;80;90;; perf_data: sessions=6338;10000;20000;; The goal is to have fo…

this solved our issues. At the end we renamed the original field "metrics" to "cmk_metrics", because of the fields removal. ruby { code => ' event.get("metrics").each { |k, v| event.set("cmk_beat",v) } event.remove("metrics") ' }

Discuss the Elastic Stack

Event parsing - perf_data from cmkbeat

Elastic Stack Logstash

Badger February 20, 2020, 3:12pm 3

You could do it in ruby. Something similar (but not the same) as this.

Topic		Replies	Views
Creating metrics from a filebeat input Logstash	1	280	May 31, 2020
Create New Fields from Metricbeat Metrics	1	461	April 8, 2022
Convert type of custom fields added via metricbeat processors Beats metricbeat	6	374	March 2, 2020
How to parse json from message field Beats filebeat	4	1106	February 8, 2024
How to Convert array fields from beats to compatible array fields of Splunk HEC input viai Logstash Beats metricbeat	1	263	October 19, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Event parsing - perf_data from cmkbeat

Related Topics