I parse IIS logs with Filebeat. Field " iis.access.referrer" has values with GET-method parametes. Example: "https://www.google.com/search?q=elasticsearch"
I want to see only host name ("www.google.com") in Kibana (term aggregation). In nornalizer I can not set custom regex pattern.
How I can do it?