I need to copy the dynamic "MODEL" from the field name and copy the value "RandomSerial" to new fields. When "MODEL" and "RandomSerial" will be different for all messages. Logstash Output: "Serial Number (MODEL)" => "RandomSerial" To this: "Model" => "MODEL" "Serial Number" => "RandomSerial"…

OK, I think I misunderstood. You have a field on the event with a variable field name "Serial Number ( MODEL )" and its value is "RandomSerial"? You want to rename the field to a fixed value and also extract the variable part of the field name as the value of a field called [Model]? That will def…

Discuss the Elastic Stack

Extract From a Field Name and Add Fields

Elastic Stack Logstash

mfisher (Max) January 28, 2020, 11:50pm 4

The fields and values are being populated with a ruby script from nested JSON. This thread shows all the configs associated. Utilize Data Parsed From Nested JSON

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.