I Just want split a message into two lines, it is a simple case, but i didn't get the result (according to: https://www.elastic.co/guide/en/logstash/5.6/plugins-filters-dissect.html#plugins-filters-dissect-mapping) and i get the bad result like:
'field1' get empty string, while 'description' lost a character 'c' from message.
I would have expected to get a _dissectfailure from that. Remove the double quotes from the dissect mapping. They do not appear in the message.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.