Removing New Line Characters in http output

If that is really what you want (which seems unlikely) then you could use

input { generator { count => 1 lines => [ '{"sender_domain": [ "example11.com", "example12.com", "test.org"] }' ] codec => json } }

filter {
    mutate {
        # Get rid of commas between entries
        join => { "sender_domain" => "" }
    }
}
output {
    http {
        ssl_enabled => false
        format => message
        message => "%{sender_domain}"
        url=> "http://127.1.1.1:2000/"
        http_method => post
    }
}

If you have a receiving pipeline

input { http { host => "127.1.1.1" port => 2000 } }
output { stdout {} }

then it will produce

   "message" => "example11.comexample12.comtest.org",

If you leave out the mutate then the output will .to_s the array and produce

   "message" => "example11.com,example12.com,test.org",
1 Like