I have used kv filter to extract key-value pairs using field_split and have used default_keys to provide default keys in case no value is present corresponding to that field.I have used strip of mutate filter to trim all the spaces from the values of the fields. But for the same field I am getting …

Oh I got the mistake "message", "\s*=\s*/", "=", should be:--- input { generator { lines => [' a = 23 | b = spaced string '] count => 1 } } filter { mutate { gsub => [ "message", "^\s*", "", "message", "\s*$", "", "message", "\s*=\s*", "=", "message", "\s*\|\s*", "|" ] }…

jainbhavya53 (Bhavya Jain) February 1, 2018, 6:46am 7

@Christian_Dahlqvist the gsub regex is not removing spaces around =.

shot

How to strip white space from all fields in logstash

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to trim zero or more leading and trailing spaces from key-value pairs?