How to divide a single field of a log in elasticsearch into multiple fields in a single event only using logstash filter plugin

I am sending emails from a mail service to elasticsearch. Now I want to have multiple fields of a single field.

Could you give some example, input data and expected output. Thank!

Hi, thanks for replying back.
image

This image shows the data I am getting in the message field of my log in elasticsearch and I want to separate these headers in the sense that the header name should be the name of the field and the value of that header should the value of that particular field.


Like you can see these fields I want to create such fields from that message field in the same event.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.