Generate grok custom pattern to message filed

There are unnecessary bracket that make an error

     PUT _ingest/pipeline/dissectpipeline
    {
      "description" : "split message content",
      "processors": [
        {
          "grok": {
              "field": "message",
              "patterns": ["\"agentId:%{NOTSPACE:agentId}\""]
            }
        }
       }  <= unnecessary 
      ]
    }
1 Like