How to create multiple pattern dissect processor - Ingest pipeline

Elastic Stack Elasticsearch
1

I have created the ingest pipeline to dissect the incoming message with single pattern but the challenge is going with multiple patterns. Given my pipeline for reference.

    PUT _ingest/pipeline/dissectpipeline
    {
      "description" : "split message content",
        "processors" : [
          {
            "dissect" : {
              "field" : "message",
              "pattern" : "%{agentId}:%{agentId}"
            }
          }
        ]
      }
    }

Using above pipeline i am dissecting the agentId for example

Incoming message : "agentId:agent003"

    After dissecting : 
    {
    "agentId":"agent003"
    }

Ultimately this is working fine but how to add multiple pattern to dissect processor pipeline like agentId i have few more fields like statuscode, servicename, userRole likewise and ensure those fields should be available for the visualization in kibana.

Could someone help me to achieve this? Thanks in advance.

2

Hi Guys,
Any update.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.