Mutate fields

Elastic Stack Logstash
1

Hello,

I need to change the below. I'm using mutate and rename within.

When I do

mutate {
update => {
"source-address" => "source.ip"
        }
}

I get the result

"source.ip" => "0.0.0.0" --> this works the way it is expected.

What I want is source-address becoming [source][ip] in the square brackets. I tried rename, update, etc. but I'm not able to figure it out. What's the best possible way to achieve this?

"source-address" => "[source][ip]"

Thank you

2 
mutate { rename => { "source-address" => "[source][ip]" } }
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.