Hi,
I want to parse some code in message field where the field names contains a number. Example:
responseGENERATED_100=76 SENT_100=76
responseGENERATED_180=221 SENT_180=221
responseGENERATED_190=0 SENT_183=0
The filename is different for other values (100,180,190,...)
With grok match, I can't add matching in the fieldname. For example:
grok { match => [ "responsegenerated_%{NUMBER:number}", "%{NUMBER:responsegenerated_%{NUMBER:number} SENT_100=%{NUMBER:responsegenerated_%{NUMBER:number}_send}
Is there another possible solution to avoid grok match for all possible numbers.
br
Sören