How to split a Json filed into two different words based on a certain character?

Elastic Stack Logstash
1

I have a Json object as below,
{"environment":"xxx", "feature":"first_attempt", "scenario":"second scenario", "project":"first"}

For the field "feature", I am looking for splitting the word into two separated by '_'. Basically I am looking for an output which prints "first" and "attempt" as two different fields.

2

You can use a grok filter or the mutate filter's split option.

3

That works. Thank you :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.