Effectively, field onething will never be added, so it would not have to be removed. Of course, if the message field is no longer needed, it would be appropriate to have remove_field => ["message"] still, as it will only remove if the conversion is successful and has no errors.
Caused by: java.lang.NumberFormatException: For input string: "FU_USAGE_OP"
at java.lang.NumberFormatException.forInputString(NumberFormatException.java:65) ~[?:1.8.0_131]
Here one of error. i have full error of this type.
Ok @theuntergeek , If my fields are empty, the values are assigned to the wrong field. How to resolve it ?
You may be compelled to use the csv filter if you have empty fields. I believe it handles those properly, where the dissect filter does not. However, that may or may not be true until you test it and find out.
Indeed, but the cost of trying to figure out which ones need to be shifted is too high. You should use the csv filter to see if it catches those properly. Otherwise, you're going to have a lot of work to try to figure out how to either omit or reprocess lines that have missing fields.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.