Hi All, Raw SYSLOG event: Jul 21 01:19:57.58 172.20.20.100 date=2016-07-20 time=20:12:25 timezone="UTC" device_name="CRiV-1C" device_id=1234-567 log_id=062009517502 log_type="Event" log_component="GUI" log_subtype="Admin" status="Successful" priority=Notice user_name="admin" src_ip=10.0.0.26 messa…

Message field within message

jaykumar (Jay) August 16, 2016, 6:40am 3

Yes this is what I would like to achieve.

Topic		Replies	Views
Remove a specific field from the log and overwrite the message field Logstash	8	2262	April 2, 2020
Rename the message field from the original log Logstash	3	1751	June 26, 2020
Extract fields from syslog "message" part for visualization in Kibana Logstash	4	2009	April 19, 2018
Filter Logstash syslog Logstash	3	686	January 3, 2018
How to overwrite/rewrite message field after kv and remove field filters? Logstash	4	2940	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Message field within message

Related topics