Hi All,
I have extracted a field from a log file which has the value [ROBO LOG A1-B] , is there a way to extract or trim only 'A1-B' into a separate new field.
.*\s(?<fieldname>.*)]$ could work.
Thanks Jenni, That works.
HI @Jenni , I have one more query, say if i have parsed 10 fields from my log file, is it possible to send only some specific 5 fields out of 10 into ElasticSearch. pls advice.
You can remove fields with mutate
Thanks Jenni, will check this.