Hot to concatenate custom string in aggregate map variable


I'm not able to write a working code for the aggregate plugin that would allow me just to add some custom strings between existing message fields. The following one is working properly:

map['dns_result'] = [map['from_ip'], map['query'].strip, map['status'], map['response'].strip].join(' '); event.set('dns_result', map['dns_result']);

But I would like to have something like this:

map['dns_result'] = ["Query":, map['from_ip'], map['query'].strip, "Response:" map['status'],map['response'].strip].join(' ');
How can I properly insert some custom string in the map variable? Please help.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.