wwalker
(Walker)
August 9, 2023, 4:09pm
1
I'm using the JDBC filter to pull info from a SQL database. If the field is blank, it generates the below:
"example": [
{
"contoso": ""
}
]
I've tried the below to remove the empty field, but it doesn't seem to work. What am I doing wrong here?
if [example][0][contoso] == "" {
mutate {
remove_field => [ "example" ]
}
}
Rios
(Rios)
August 11, 2023, 12:59pm
2
Have you solved this?
Your logic for the empty value field is OK. What is possible that you get null instead "". In that case:
if [example][0][contoso] {
mutate {remove_field => [ "example" ] }
}
system
(system)
Closed
September 8, 2023, 1:00pm
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.