How do I avoid indexing through comma's between "<<>>" in my CSV files

Elastic Stack Logstash
1

I am new to logstash and I am trying to create a Conf File with CSV file as source. The CSV file contains field values within <<>>> that are also comma separated which should be treated as one field. How do I avoid indexing for the fields between '<<>>' which are also comma separated?

2

To avoid misunderstandings, could you show an example and what fields you'd like to extract from that example?

4

Sample log:
1,2,3,4,<,5,6,7,8,>,9,10
It should remove comma's between < > with empty space.
so the result should look like 1,2,3,4,< 5 6 7 8 >,9,10

Please suggest...

Thanks!

5

Hmm. Maybe you can use the csv filter's quote_char option for this. Try setting it to [<>]. If that doesn't work I don't know if there's anything that can be done (short of a ruby filter with some custom code).

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.