Hello, I have a log line for diskusage such as disk-usage: [1]=76% [2]=26% [3]=26% [4]=24% [5]=24% [6]=28% i used dissect and kv to get the values as needed . { "@timestamp" => 2021-09-06T08:22:46.944Z, "4" => "24%", "1" => "76%", "6" => "28%", …

[image] Shreesh_Narayanan: However i needed to rename the field name to something more user friendly . such as renaming [1]=>"76%" to disk#1 => "76%" I explained how to do that the last time I answered this question for you.

Discuss the Elastic Stack

Filter to change the field name to be more user friendly

Elastic Stack Logstash

Badger September 7, 2021, 2:32pm 2

I explained how to do that the last time I answered this question for you.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.