New filed is not showing After using GROK Command

I have a csv file in which i have only one record which is
Insert_time
13/05/2019 0:00:55
Mobile 923xxxxxxxxx
Telco : Paktel
Mask : 62222
Message : Your MCB Debit Card has been charged PKR x
Now i am using grok message in my config file file has been running successful

but i got this result
i have this config file
input
{
file
{
path => "D:/kibanaproject/grok.csv"
start_position => "beginning"
sincedb_path => "NUL"
}
}
filter {
grok {
match => {
"Message" => [
"Your MCB Debit Card has been charged PKR %{NOTSPACE:Amount}"]

output {
elasticsearch {
hosts => ["localhost:9200"]
index => "testing-%{+dd.MM.YYYY}"
}
stdout {
codec => json_lines
}
Please help at earliest highly appreciated

ouput will be pkr xx will go in amount column

For supporse PKR 1234 , In Amount column 1234 will be drop if there is something wrong in my config file please help

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.