2020-03-06 09:36:52.801907464 re0:ndp:25786 lltp_debug message = "NDP-DBG:NC_FSM_HANDLER:1634:: state 7, event 4, NexthopId 44001" This is my log. I need to extract state and NexthopId from the message field match => { "message" =>"%{TIMESTAMP_ISO8601:timestamp} %{WORD:node}:%{WORD:program}:%{INT…

Extracting a new field from the message field

Fabio-sama (Fabio) March 6, 2020, 2:00pm 2

Hi there,

do you need to extract only the NexthopId or all the other fields you put in your grok, too?

Topic		Replies	Views
Help to create new field from message Logstash	2	347	February 20, 2023
Help to create new field from message Logstash	3	711	March 31, 2022
Grok filter extracting fields from message Logstash	9	2718	July 21, 2020
Grab value from message field and add it to a new field Logstash	5	1058	July 6, 2017
Logstash Extract message field .log file Logstash	1	369	June 30, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Extracting a new field from the message field

Related topics