Extracting a specific data from a field

Hi All,
I have extracted a field from a log file which has the value [ROBO LOG A1-B] , is there a way to extract or trim only 'A1-B' into a separate new field.

.*\s(?<fieldname>.*)]$ could work.

1 Like

Thanks Jenni, That works.

HI @Jenni , I have one more query, say if i have parsed 10 fields from my log file, is it possible to send only some specific 5 fields out of 10 into ElasticSearch. pls advice.

You can remove fields with mutate

Thanks Jenni, will check this.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.