Logstash is receiving this, and I want to remove " --------------- Event Log Start Here ---------------\n" and "\n--------------- Event Log End Here ---------------" from it. And, I want to pull Timestamp value and assign it to @timestamp. I've gotten close, but can't get it to do everyting I …

Use the gsub function of mutate to remove/replace field values. Something like: filter { mutate { gsub => [ "fieldname", "--------------- Event Log Start Here ---------------", "", "fieldname", "--------------- Event Log End Here ---------------", "" ] } } I'm not sure if …

I want to strip out the beginning and ending parts of the log entry

Elastic Stack Logstash

wwalker (Walker) March 27, 2018, 2:18am 5

How did you do it, two separate lines like my example or a single line like I mentioned in my closing paragraph?

Topic		Replies	Views
Remove part of message string Logstash	7	19444	December 21, 2016
Remove message and replace timestamp fields Logstash	3	287	April 29, 2020
Replace @timestamp with timestamp in my message - logstash Logstash	12	516	February 27, 2019
Can i replace logstash timestamp with timestamp of my logfile? Logstash	17	40322	July 6, 2017
How to overwrite Log time values with @timestamp Logstash	3	2347	December 26, 2016

I want to strip out the beginning and ending parts of the log entry

Related topics