Hii.I am trying to create a new_field called "log_data" and I want to add each value in "log_data" field present in the message field.I want only one field with multiple values.How can I achieve this? This are the documents:- { "host" => "elk", "@timestamp" => 2021-09-13T11:43:11.74…

How to add all field values in a single field?

system (system) Closed October 13, 2021, 10:17am 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How to perform concatenation of values from the same field in multiple lines? Logstash	1	1359	July 6, 2017
How to extract first line of a multiline message? Logstash	3	567	April 16, 2018
Logstash : parse multiple lines, each in one field in a single event Logstash	3	967	August 2, 2018
Logstash filtering for field with multiline Logstash	1	412	November 20, 2017
Sending mutiple events to single event using multiline codec for email output? Logstash	9	1492	June 8, 2017