Logstash XML Filter Output

Elastic Stack Logstash
1

Hello,
i have a xml encoded logfile which is transferd with filebeat to logstash.
in the logstash pipeline i use the xml-filter.
the output looks like: Event.Client-IP-Address { "content": "10.x.x.x", "data_type": "3" }
Input line looks like: <Event><Client-IP-Address data_type=3>"10.x.x.x<Client-IP-Address/><Event/>
And Filter: filter { xml { source => "message" target => "Event" } }
But i want to fill the Field Event.Client-IP-Address with just the xml content field and ignore data_type.

How can i do this?

2

Try mutate filter https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.