Hi, I'm trying to write up a gsub to remove everything before a slash. My input will come in the format of something similar to: LP-45XP\joe.bloggs 3G49-2AP\john.doe random_PC-domain_name\random_firstname.random_lastname All I'm looking for is the firstname.lastname from the field. Currently, …

Gsub syntax to remove all before \

Rodolphe_Redoute (Rodolphe Redouté) October 9, 2017, 3:03pm 2

can you give the entire filter ?
also your regex isn't correct, try this "(.*\\)" instead of "[*\\]"

Topic		Replies	Views
Logstash Filtering split Logstash	4	284	May 13, 2019
Gsub not work Logstash	1	751	September 29, 2017
Using Gsub to replace field values Logstash	9	5168	September 13, 2017
Gsub match specific string and replace with blank Logstash	2	3516	March 27, 2019
Remove starting and ending forward slash Logstash	4	1363	August 30, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Gsub syntax to remove all before \

Related topics