Hello, I have a field that looks like that lists: list1 list2 The number of lists is not defined, here it's 2 but it can be 3 or 4 I'd like to create new fields with new values lists1 => list1 lists2 => list2 Do you know how can I do that ? The syslog message looks like this IP.43.144.37: d…

How can I split fields

Mojster August 29, 2017, 12:26pm 2

First of all I would suggest to split by " " using mutate.

For the second step, here's a topic over iteration:
Iteration in Logstash

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.