How do you remove $ and % signs that precede integer values on Elasticsearch?

"price" => "$2,190"

thats how it shows on ES!
I would like to remove the $ on logtash before sending it to ES.

You could use the gsub function of a mutate filter.

thanks Badger, can you give an example of the syntax?

mutate { gsub => [ "message", "\$", "" ] }

Note that you have to escape the $ because otherwise it would anchor the pattern to end of string.

Thanks a lot, this worked for me :grinning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.