I use grok to differentiate the content in each line of the log and mutate to create a new field and be able to assign those values but it doesn't work, write the configuration content literally. I don't have compiling problems. I try the first one and the second and nothing change. grok { …

I answer myself with this wonderful entry :sweat_smile: [image] Grok add_field creates two values Logstash Hi, I'm using logstash 2.1, and I have the following filter: if ("sha1_hash" in [hash_field]) { grok { patterns_dir => ["/opt/logstash/patterns"] …

Discuss the Elastic Stack

I cant set values in new fields

Elastic Stack Logstash

Jonny3 (Jonny) January 14, 2020, 8:32am 2

I answer myself with this wonderful entry

That was my problem...

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.