Ingest pipeline : dissect log sentence

Hello All , would like to request a help on how to split a sentence into small chunk . for example I am making a pipeline from custom integration through kibana dashboard , the log is like this: [;mid=51;ip=;ua=iPhone Mail/19E258;cid=10942;]
I want to remain with the field like this :
mailbox_name: ""
ip: ""

others should be ignored"

please help me


Welcome to our community! :smiley:

Just so I am clear, are you wanting to split on ;?

Exactly , you are right.

Take a look at Split processor | Elasticsearch Guide [8.2] | Elastic then.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.