Hi I'm new to ECE and have a filebeat pipeline which sends data to ECE. This is the format of the message field which I have in ECE (separator would be -> \t): 2021-06-25T13:08:39.559+0200 INFO 12409 com.l7tech.traffic: 2021-06-25T11:08:39.554Z\tno_endpoint\tmonitoring\tno_operation\tno_consum…

Thanks for the response. In the meantime I solved my issue by using a "Script" processor int tempStart = ctx.tempFormatted.indexOf("19=",0); int tempEnd = ctx.tempFormatted.indexOf("20=",0); ctx.providerMessageId = ctx.tempFormatted.substring(tempStart+3,tempEnd-2);

How to split array or string with "Ingest Node Pipeline"

Elastic Stack Elasticsearch

spinscale (Alexander Reelsen) June 29, 2021, 9:25am 2

the split processor sounds right. Can you share a fully reproducible example using the Simulate Ingest Pipeline API so that others can try to build the same?

Thank you!

Topic		Replies	Views
Processor -> split -> set array.element? Beats filebeat	3	1158	May 26, 2017
Split a field in elastic search Elasticsearch	7	778	April 17, 2019
Ingest pipeline - How to stores the split values into separate new fields? Elasticsearch	3	3167	October 21, 2019
Ingest pipeline split MESSAGE field into multiple fields Kibana	7	2520	August 2, 2022
_ingest processor Elasticsearch	3	458	May 26, 2017

How to split array or string with "Ingest Node Pipeline"

Related topics