How do I created a scripted field from a message field that I already have

Hello,

I am new to scripted fields . I have a field "message" in my logs. I am trying to create scripted fields/customized fields for the content inside the message field. Can anyone please tell me how to create custom fields in this case. I need the content of the message field split up into individual fields.

You should really parse this out before you index the documents as using scripted fields moves all the processing to query time which will be slow and scale badly.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.