How to get the domain name from a fully qualified hostname via GROK.
I have used the pipeline to extract a couple of details from filebeat and getting one of the fields as hostname, needs to fetch the domain name from a fully qualified hostname.
Here are a couple of examples:
Fully qualified hostname could be:
The domain name for the above hostname should be as follows:
Thanks for your help in advance.