Hi I tried to change a value in a field for use it like id but i couldn't modify the field value with gsub The data i have in the field is like this: rId = ABC0_L123456_789012 and only data i want is 123456 from rId, this is my config add_field => ["rNum","%{rId}] gsub => [ "rNum","^.L","","rNum…

LOGSTASH - GSUB - DOESN'T MATCH

Badger July 22, 2021, 4:07pm 10

Split the mutate filter into two mutate filters if you want to force the order.

Topic		Replies	Views
Gsub - Basic example Logstash	3	589	July 29, 2020
Gsub not work Logstash	1	751	September 29, 2017
Using Gsub to replace field values Logstash	9	5168	September 13, 2017
Upgrade to 5.5.1 = gsub fails? Logstash	2	560	August 23, 2017
Copy field and gsub it Logstash	8	4929	November 23, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

LOGSTASH - GSUB - DOESN'T MATCH

Related topics