I have an input into elasticsearch from a large amount of json formatted data. The input looks like this file{ codec => json path => "/opt/apps/logs/health/*.log" type => "health" } } Very simple. The data in each event looks like this (paraphrased) First event Item.1234.pineapp…

Remove part of field name from json inputted fields

sirmodok September 23, 2016, 7:24pm 2

I have tried using the information posted here

And I just end up with _rubyparse errors in my tags as well as some additional "cannot convert string to integer " errors in my logstash.log

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.