How We can extract query

Elastic Stack Logstash
1

I have this url
https://www.reddit.com/search?q=apple
i want to extract query parameter from thie url
how?

2

Use a dissect filter

dissect { mapping => { "somefield" => "%{url}?%{qs}" } }
kv { source = "qs" field_split => "&" }
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.