I'm trying to put postfix logs to elasticsearch.
I'm stuck with parsing the pri-tag - in fact, I want to remove it from the message.
Here's a line from logs being sent:
<22>Aug 21 18:34:14 mailserver postfix/qmgr: 37C0E2D1C: removed
I want to remove that number <22>
I've found this thread Remove part of message string but even when adding a gsub like
gsub => ["message", "<22>", ""]
it doesn't work.
Any help is appreciated