New Logstash Grok add_field

Elastic Stack Elasticsearch
#1

Hi everyone

I am trying to add a new field for pick up a hostname from a logfile like this format:

Source : \\abc123

I tried with setting patterns file and add_filed in grok and mutate but it is not added, it seems is not able to be referenced from pattern file.

I would need at the end to have a new field called "source" with value "abc123" displaying that value in kibana dashboard for searching records.

Thanks

#2

Hi,

You can use Set processor | Elasticsearch Guide [8.5] | Elastic processor for that.

#3

Hi

thank you for your reply.

The hostname value should be dynamc, the new field should be able to set it for each different logfile contain this record.
Can I achieve this with the processor? if yes could you please write a small example, I m afraid it s not suitable for my case...

Thanks

#4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.