I use grok to differentiate the content in each line of the log and mutate to create a new field and be able to assign those values but it doesn't work, write the configuration content literally. I don't have compiling problems. I try the first one and the second and nothing change. grok { …

I answer myself with this wonderful entry :sweat_smile: [image] Grok add_field creates two values Logstash Hi, I'm using logstash 2.1, and I have the following filter: if ("sha1_hash" in [hash_field]) { grok { patterns_dir => ["/opt/logstash/patterns"] …

Discuss the Elastic Stack

I cant set values in new fields

Elastic Stack Logstash

Jonny3 (Jonny) January 14, 2020, 8:32am 2

I answer myself with this wonderful entry

That was my problem...

Topic		Replies	Views
Adding new fields from grok filter in logstash Logstash	1	547	November 20, 2018
How to assign the extracted data from log file to new added fields Logstash	6	284	September 27, 2020
Reference a value from new added field within grok match setting Logstash	1	161	April 11, 2022
I want to add new field and replace the one of the existing field value to the newly added field Logstash	1	283	September 13, 2019
How to assign a new field a certain type and value? Logstash	3	16553	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

I cant set values in new fields

Related topics