I have data from Jenkins console and I am using Logstash Plugin to ship logs to ES .
Now the problem is that I want to extract data from the "message" field and create a custom field. I understand that logstash gork is a good option , but the logstash config files are not available as I am using the logstash-jenkins plugin to ship console logs from Jenkins.
Please let me know if there is way to filter data from the message field in my situation.Will I have to create a new mapping or is there any other way ?
I also understand that I can use painless and create a field. But I am using Logtrail and even if I create this custom field using painless, I wont be able to use it in Logtrail. So the field needs to be created at the source level.