Ingest pipeline : dissect log sentence

Elastic Stack Elasticsearch
1

Hello All , would like to request a help on how to split a sentence into small chunk . for example I am making a pipeline from custom integration through kibana dashboard , the log is like this: [name=tamari.mpaka@apm.rw;mid=51;ip=10.17.42.171;ua=iPhone Mail/19E258;cid=10942;]
I want to remain with the field like this :
mailbox_name: " tamari.mpaka@apm.rw"
ip: "10.17.42.171"

others should be ignored"

please help me

Michel

2

Welcome to our community! :smiley:

Just so I am clear, are you wanting to split on ;?

3

Exactly , you are right.

4

Take a look at Split processor | Elasticsearch Guide [8.2] | Elastic then.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.