How to extract specific keyword from Logs in logstash

Elastic Stack Logstash
1

Hi
I would like to extract specific keyword from Logs and store it in another variable using logstash

pls find below the logs

6/26 00:33:04 -INFOS- {1:2} Decision PASSED_WITH_RESV applied on 1 message(s)
api.service#001(20440) 2020/06/26 00:33:04 -INFOS- {1:2} Read 1 message(s) ((1)"2"/(16)"PASSED_WITH_RESV"/ROOT/TS/unknown) from http-server(5419s)[api.receive.service.request]
cmapi.receive.service#001(20440) 2020/0

I want to extract only the PASSED_WITH_RESV"/ROOT/TS/unknown field and store it in another field

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.