Extract data from one field and add that in another filed

(Avinash Kumar) #1

all i have is events with content of log in message field , now i want to add few new fields and add relevant data to that field , how to achieve that?

(Christian Dahlqvist) #2

Have a look at this introduction to Logstash, which shows how to use grok and dissect to parse content.

(Avinash Kumar) #3

i have this now i want to remove message field and add fields like "machine name", "Stack trace" etc.

(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.