Field value String manipulation in logstash filter

Elastic Stack Logstash
1

I need to manipulate the string value of my json log, This is my sample log file
{"LogLevel":"ERROR","LogMsg":"{\"itemId\":0,\"module\":\"/curie/calendar/appointment\",\"action\":\"/getSlotByDate/{doctorId}/{date}\",\"errorMessage\":\"systems.ellora.core.exception.UnhandledRuntimeException: .... 108 more\\n\",\"parameter\":\"8/2017-08-31\"}","Time":"2017-08-21_02:13:31.517"}
1- I need to manipulate the errorMessage field value string to 50 characters.
2-This is a valid json file.

2

Any one?

3

Not sure though, but you can try mutate convert filter to maximize string

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.