Extracting a specific data from a field

Elastic Stack Logstash
1

Hi All,
I have extracted a field from a log file which has the value [ROBO LOG A1-B] , is there a way to extract or trim only 'A1-B' into a separate new field.

2

.*\s(?<fieldname>.*)]$ could work.

1 Like
3

Thanks Jenni, That works.

4

HI @Jenni , I have one more query, say if i have parsed 10 fields from my log file, is it possible to send only some specific 5 fields out of 10 into ElasticSearch. pls advice.

5

You can remove fields with mutate

6

Thanks Jenni, will check this.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.