Is there a way using filebeat to find and replace a string in the [message] field of a log entry before sending to Elasticsearch? (similar to mutate and gsub in logstash)
Hi!
Script processor might be the way to go here: https://www.elastic.co/guide/en/beats/filebeat/master/processor-script.html
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.