How to extract a specific field from a string if the string length varies?
Welcome @stanislavcik!
Does your field have a particular pattern or separator? If so it should be possible using a grok filter.
If you have an example that you're trying to parse it would be useful to see to help further.
Let us know!
1 Like
Also you can use mutate-gsub. In both case, grok or gsub, you should use a regex pattern.
1 Like