Filtering binary data from an ASCII string

Hi,

I have a mainframe log with message containing some binary data. I would like to trim that binary data in Logstash before sending it to elasticsearch. I am not able to find a way. Below is the sample data that I am getting:

"\u0000\u0000\u0000C\u0000 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{"response":{"message":"Hello World"}}"

I want to trim all the data before {"response":{"message":"Hello World"}}"

can someone please help.

thanks,
Pawan

You might be able to use a mutate filter's gsub option to remove all leading non-printable characters. Otherwise you can write some Ruby code in a ruby filter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.