Logstash is receiving this, and I want to remove " --------------- Event Log Start Here ---------------\n" and "\n--------------- Event Log End Here ---------------" from it. And, I want to pull Timestamp value and assign it to @timestamp. I've gotten close, but can't get it to do everyting I …

Use the gsub function of mutate to remove/replace field values. Something like: filter { mutate { gsub => [ "fieldname", "--------------- Event Log Start Here ---------------", "", "fieldname", "--------------- Event Log End Here ---------------", "" ] } } I'm not sure if …

Discuss the Elastic Stack

I want to strip out the beginning and ending parts of the log entry

Elastic Stack Logstash

JimP (James Peppercorn ) March 26, 2018, 7:44pm 4

Works, thanks!

Topic		Replies	Views
Remove part of message string Logstash	7	19451	December 21, 2016
Remove message and replace timestamp fields Logstash	3	289	April 29, 2020
Replace @timestamp with timestamp in my message - logstash Logstash	12	520	February 27, 2019
Can i replace logstash timestamp with timestamp of my logfile? Logstash	17	40331	July 6, 2017
How to overwrite Log time values with @timestamp Logstash	3	2347	December 26, 2016

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

I want to strip out the beginning and ending parts of the log entry

Related topics