I'am working on Microsoft DNS log parsing and i don't know how can i parse different lengh of domain name.
Here is different examples of what i want to get :
(2)ui(12)powerreviews(3)com(0) into ui.powerreviews.com
(6)watson(9)telemetry(9)microsoft(3)com(0) into watson.telemetry.microsoft.com
As you can see those two ones are 3 and 4 fields long and sometimes i get some 10 fields long domain name and i want my logstash being able to parse every length of domain name.
cybersecurity apprentice for CD54