Hi, there is a task to filter out the result with just "\r" in json represenmtation
I tried the following code to filter:
if [Message] =~ /^\r$/ {
mutate {
add_field => {
"new_field" => "should be filtered"
}
}
}
But it also filters out he valid data like:
if I try:
if [Message] == "\r" {
mutate {
add_field => {
"new_field" => "should be filtered"
}
}
}
It filters nothing.
Can anyone advise?