gsub is an option of the mutate filter. add_field is a common option for every kind of filter that is executed if the filter has been successfull. Therefore it is executed after gsub. Your field doesn't yet exist when gsub is executed. So you'll have to split that up into two mutate filters.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.