I have a log pattern like this
OTHERS|5HUNVWW|5HUNVWW|1469784588193|1469784588193|
these pipe separated values represent a key so I want to create fields like
field1 = OTHERS
field2 = 5HUNVWW
and so on . How can I achieve this ?
I have a log pattern like this
OTHERS|5HUNVWW|5HUNVWW|1469784588193|1469784588193|
these pipe separated values represent a key so I want to create fields like
field1 = OTHERS
field2 = 5HUNVWW
and so on . How can I achieve this ?
filter {
ruby {
code => '
ids = event["message"].split("|")
ids.each_index { |i| event["field#{i}"] = ids[i] }
end
'
}
}
I achieve it using this can anyone tell what will be the best logic to give customize name not like field1 and field2 it should be like firstname , lastname schoolname etc
You should be able to use the csv filter for this type of data.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.