[logstash] Hi, I am fetching the data from Azure - event hubs , I need to split the data which is in message field and i have tried split filter and grok filter it is showing the error which is in tags. Please help me to sort out which filter can be used and how it can be done.

Logstash filter

Badger February 9, 2021, 4:41pm 2

I would suggest using mutate+gsub to strip off the first few characters then using a json filter to parse the data.

Topic		Replies	Views
How to use split filter on the field using logstash Logstash	5	6317	March 27, 2019
Logstash filter not able to split Logstash	4	1012	July 6, 2017
Handling events after using split Logstash	3	1058	July 6, 2020
Logstash Split Plugin Logstash	14	2129	March 8, 2017
Logstash split log file Logstash	1	635	June 23, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash filter

Related topics