Hi,
I'm not able to write a working code for the aggregate plugin that would allow me just to add some custom strings between existing message fields. The following one is working properly:
map['dns_result'] = [map['from_ip'], map['query'].strip, map['status'], map['response'].strip].join(' '); event.set('dns_result', map['dns_result']);
But I would like to have something like this:
map['dns_result'] = ["Query":, map['from_ip'], map['query'].strip, "Response:" map['status'],map['response'].strip].join(' '
);
How can I properly insert some custom string in the map variable? Please help.
PaVliK