Insert first lines as fields to each line

Elastic Stack Logstash
1

Hi all
I am new to ELK and Logstash. Here is my question:
I have raw log file, content like below:
AA:aa
BB:bb
a1,b1,c1,d1
a2,b2,c2,d2
a3,b3,c3,d3
a4,b4,c4,d4

My question is how to setup the configure so my final input can be

AA:aa BB:bb a1,b1,c1,d1
AA:aa BB:bb a2,b2,c2,d2
AA:aa BB:bb a3,b3,c3,d3
AA:aa BB:bb a4,b4,c4,d4

or just like below, as AA and BB is the field name.

aa,bb,a1,b1,c1,d1
aa,bb,a2,b2,c2,d2
aa,bb,a3,b3,c3,d3
aa,bb,a4,b4,c4,d4

2

This thread might help you, but realize that this is fragile, and does not scale because you have to have '--pipeline.workers 1'

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.