Logstash regex pattern for a windows path

Elastic Stack Logstash
1

Hello Elastic community,

I am trying to use a if condition for my logstash filter for a windows path but not sure about the delimiter and correct syntax.

Here is my complete windows directory " R:\I3\IC\Logs\Sabio_Elk_Logs\amit1.txt " and I just need Sabio_elk_logs to be the value for my if condition.

I tried if [log][file][path] =~ \\Sabio_elk_logs\ but it didn't work.

Can somebody throw some light on this regex pattern especially for windows path.

Kind regards,
Shubham

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.