The raw data are as follows
"money快照" => [
[0] "money:14683689,value:15105589,time:2021-07-27 23:50:54",
[1] "money:14683689,value:15105589,time:2021-07-27 23:50:56"
],
The configuration file is as follows
mutate {
#gsub => ["jsonmsg","\[","\{" ]
#gsub => ["jsonmsg","\]","\}" ]
remove_field => ["message"]
add_field => {
"value1" => "%{[money快照][0]}"
}
}
give the result as follows
"value1" => "%{[money快照][0][value]}",