Hey i want to add some text into my message can anybody help me how to do it?

Elastic Stack Logstash
1

Hey i want to add some text into my message can anybody help me how to do it?

2

Maybe using a mutate filter. You can add fields or tags, and the gsub option can modify fields.

3

Hi Thankyou Badger for your reply.

I have used the update option but this replaced my whole message. I just want to put some additional text after the message. Can you please tell me in detail how to use gsub option for field modification? One more thing I wanna add I have xml data and I guess gsub supported only strings or arrays of strings.

4

Have you tried the replace function?

Something like this should work:

filter {
  mutate {
    replace => { "message" => "%{message} extra text" }
  }
}
5

hi thanks for contributing!

This works for me

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.