I am trying to map my http payload and put the whole Logstash event inside another json key/field:
http {
format => "json"
http_method => "post"
url => "some url"
headers => ["some header"]
mapping => {
"field 1" => "value 1"
"field 2" => "value 2"
"event" => "I want my whole event to be exploded here, how can I do that? I tried %{source}, %{data} both don't work - how can I do this? "
}
}
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.