Hello, I'm trying to manipulate a bunch of fields that have names with special characters (e.g. @ or dots). This is a usual case if someone uses Logstash-logback-encoder for shipping logs from an application to logstash. Unfortunately, neither mutate nor ruby seems to do the trick. Snippets of c…

Using parentheses did not help either. :confused: This is the raw JSON document: https://jsonblob.com/9dd7d201-f483-11e8-a31c-2b4675e319d9 This works: if [@fields.request_headers][user-agent] =~ "ndroid" Good idea asking for the raw JSON doc!

Discuss the Elastic Stack

Logstash - Manipulate field with special characters

Elastic Stack Logstash

g.le (G Le) November 30, 2018, 10:26am 16

Thanks again @Eniqmatic!
We would never reach the solution had you not suggested taking a closer look to the raw JSON document.

1 Like

Topic		Replies	Views
Mutate/remove fields with dot caracters Logstash	6	4714	August 9, 2017
Change the value of a field Logstash	7	19845	September 7, 2017
Renaming fields wild card logstash Logstash	3	2297	August 6, 2019
Removing special characters Logstash docker	7	1264	August 15, 2022
Best Way to create nested field Logstash	10	21121	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash - Manipulate field with special characters

Related topics