How We can extract query


(Mojtaba Motamed) #1

I have this url
https://www.reddit.com/search?q=apple
i want to extract query parameter from thie url
how?


#2

Use a dissect filter

dissect { mapping => { "somefield" => "%{url}?%{qs}" } }
kv { source = "qs" field_split => "&" }

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.