Logstash - How to split this field

Elastic Stack Logstash
1

Hi There,

Could anyone help me to split the field in two different fields and values

event_data.Hashes : MD5=F9DFBDD2BA6AE341FE1FF7585B4,SHA256=36D007B5FE48FE7C27FB01085E2E322BA9EC78EAABC6DDE506C308D1

is it possible to make like two fields like

event_data.Hashes.MD5 and event_data.Hashes.SHA256

2 
kv { source => "Hashes" target => "Hashes" field_split => "," }
1 Like
3

You are awesome :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.