I posted a similar question to the elasticsearch forum since it appeared to be more of an intrinsic ES problem. But I am not sure. I have the following filebeat yaml. Basically I am attempting to split based on \t (tab) then assign the array output via set. Just testing the first field right now.…

Processor -> split -> set array.element?

Zachary_Buckholz (Zachary Buckholz) April 28, 2017, 1:53pm 3

Thanks, I missed the verbose option. Going to try that this morning.

Thank you.

Topic		Replies	Views
_ingest processor Elasticsearch	3	458	May 26, 2017
How to split array or string with "Ingest Node Pipeline" Elasticsearch	3	1541	July 27, 2021
Ingest pipeline - How to stores the split values into separate new fields? Elasticsearch	3	3167	October 21, 2019
Access array element after split processor Elasticsearch	4	3090	July 25, 2017
Split and access to array elements Beats filebeat	2	656	November 8, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Processor -> split -> set array.element?

Related topics