Overwrite the value for String field

Elastic Stack Logstash
1

Good day ! could you please help me with the following question:
how can i overwrite or (what plugin should i use?) the following value to another one:

from /server/oauth2/userinfo/slaves/*
to /server/oauth2/userinfo
for nginx.access.uripath field

logstash version is 7.6.1

2

Mutate update to update value or rename to change the field name.

3

i tried to use this, but i need to change some values to another values regularly (drop extra information from uri)

4

Something like this:
mutate { gsub => [ "[nginx][access][uripath]","\/server\/oauth2\/userinfo\/slaves\/*", "/server/oauth2/userinfo" ] }
Is this part in url? For instance, /server/oauth2/userinfo/slaves/images/pic.jpg?

5

yes, it is

6

Unfortunately, uri path didn't modified

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.