Hi, I have a logstash pipeline script of the form input-filter-output. The filter part is a long and convoluted grok expression. This worked great for me before, but now that we have moved to the managed elastic cloud, I am shipping logs directly there (without logstash). So the question was, is there any way to use the existing filter script in a log transform query?
Welcome to our community! 
You may be able to use the ingest functionality to do this - https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.