Only write a particular field of an event to a tcp socket


(Nitesh A Jain) #1

Using the latest logstash and my current config is :
input {
kafka {....}
}

output {
tcp {
port => 10001
}
}

I can see with this config, the data written to the socket is:

$ nc -l -p 10001
{"@timestamp":"2016-12-06T19:52:47.046Z","@version":"1","message":"test 1 1","tags":[]}

I want to write only "test 1 1" to the tcp socket.

Any suggestions, apart from actually making changes to the tcp output plugin ?


(Mark Walkom) #2

There is no other way.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.