New Logstash Grok add_field

Hi everyone

I am trying to add a new field for pick up a hostname from a logfile like this format:

Source : \\abc123

I tried with setting patterns file and add_filed in grok and mutate but it is not added, it seems is not able to be referenced from pattern file.

I would need at the end to have a new field called "source" with value "abc123" displaying that value in kibana dashboard for searching records.

Thanks

Hi,

You can use Set processor | Elasticsearch Guide [8.5] | Elastic processor for that.

Hi

thank you for your reply.

The hostname value should be dynamc, the new field should be able to set it for each different logfile contain this record.
Can I achieve this with the processor? if yes could you please write a small example, I m afraid it s not suitable for my case...

Thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.