Hello, My problem has two solutions that I can use. At the moment I am not achieving success in any. My log 2020-04-30T13: 48: 17.954 Int 50141 009401EA-1003849D 3553384768 custom_var navigation|4300; 4201; 7001; 8001; 9000 Solution 1 Try to separate the data after the "|" character: grok { …

Ok Im fixed this with [image] LogStatsh- Grok Filter for Special character in the log file Logstash Hi, I have the below log pattern in a single line and trying to filter this from massive log using GROK FIlter 2018-02-17 17:00:12.7280 Information |||| Application: Hyp…

Discuss the Elastic Stack

Problem to replace field string "|" with mutate gsub filter

Elastic Stack Logstash

esportuga (Fabio Portugal de Paula) May 11, 2020, 10:12pm 3

Ok

Im fixed this with

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.