I'm trying to migrate my Logstash filters into Elastic Common Schema, and I'm wondering if there is any conversion for common patters, like %{SYSLOGBASE}.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
Not at this time. Fields have to be renamed in bulk.
I'm sure the Logstash team would welcome contributions on the patterns.