Logstash parse multiple instances of the same word into Elasticsearch Array

(Jose Portocarrero) #1

Hi I am trying to extract the following from a log line into 2 different
array fields

03/07/2014 13:29:43.103 INFO NUM0000001DOS0000001-000000001 TDKIIDKSSS
NUM0000002DOS0000002-000000001 TDKIIDKSSS NUM0000003DOS
0000003-000000001 TTDKIIDKSSS NUM0000004DOS0000004-000000001TDKIIDKSSS NUM
0000005DOS0000005-000000001 TDKIIDKSSS

My issue is that from my experience grok works only on fixed patterns. I am
trying to extract the above numbers from different log lines that would
have NUM and DOS repeated ranging for 2 times or 100 times.

Is there a way to get mutiple repetitions and put them in an array using
logstash for elasticsearch to store?

You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/1b125f34-5bc2-4e14-ab80-ee6901ccab47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

(system) #2