Parsing underscore


Can you help me please?
I need to parse this field in logstash filter :


And I want to put word3 into a new field named my_field.

How to do this please?

I try with grok and regular expression.


Hello Regis,

Can you post us which grok you have tried? Maybe we can help you with finding the error.

Best regards

I found a solution with this :


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.