How do you remove $ and % signs that precede integer values on Elasticsearch?

Elastic Stack Logstash
1

"price" => "$2,190"

thats how it shows on ES!
I would like to remove the $ on logtash before sending it to ES.

2

You could use the gsub function of a mutate filter.

3

thanks Badger, can you give an example of the syntax?

4 
mutate { gsub => [ "message", "\$", "" ] }

Note that you have to escape the $ because otherwise it would anchor the pattern to end of string.

5

Thanks a lot, this worked for me :grinning:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.