Hi, How to drop first header line of csv file ?
i am trying below code.. and want to drop complete document. Please advise..
filter {
if [message] =~ /^Occurred On/ {
drop {}
}
}
Hi, How to drop first header line of csv file ?
i am trying below code.. and want to drop complete document. Please advise..
filter {
if [message] =~ /^Occurred On/ {
drop {}
}
}
That looks fine, depending on what the input looks like.
The CSV input contain 138 fields and one field is Occurred On...
And that's the first field? Then it should work just fine. Try creating a minimal example that exhibits the problem.
yup you are right it is not first field...it is working fine now
filter {
if [message] =~ /^Type/ {
drop {}
}
}
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.