Hi, I'm new with ELK. Just want to ask, how to remove "[" on the logstash?
[{"uuid": "8153990955613214174559836954673410970", "label": ["Phone", "Laptop", "Pc", "Computer", "Iphone", "Mobile Phone", "Electronics", "Cell Phone"]
Example, I want to remove the "[" bracket using mutate in logstash, it is possible?
Hello Mario,
You can use the grok filter for example.
This could be your pattern: \[%{GREEDYDATA:json}\]
\[%{GREEDYDATA:json}\]
It creates a field called json containing everything between the brackets.
Best regards Wolfram
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.