Logstash parse multiple instances of the same word into Elasticsearch Array


(Jose Portocarrero) #1

Hi I am trying to extract the following from a log line into 2 different
array fields

03/07/2014 13:29:43.103 INFO NUM0000001DOS0000001-000000001 TDKIIDKSSS
NUM0000002DOS0000002-000000001 TDKIIDKSSS NUM0000003DOS
0000003-000000001 TTDKIIDKSSS NUM0000004DOS0000004-000000001TDKIIDKSSS NUM
0000005DOS0000005-000000001 TDKIIDKSSS

My issue is that from my experience grok works only on fixed patterns. I am
trying to extract the above numbers from different log lines that would
have NUM and DOS repeated ranging for 2 times or 100 times.

Is there a way to get mutiple repetitions and put them in an array using
logstash for elasticsearch to store?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/1b125f34-5bc2-4e14-ab80-ee6901ccab47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #2