Hi, I'm using kv filter in order to extract several fields out of "attributes" field, which works just fine. But then, I need to apply a mutate filter (rename in my case on one of this key-value pair that was extracted) I tried the following: json { source => "message" } grok { match => [ "m…

Rename field after extracting it from another field

magnusbaeck (Magnus Bäck) August 23, 2018, 6:24pm 2

Please show an example of a processed event. Use a stdout { codec => rubydebug } output to dump the raw event.

Topic		Replies	Views
How to rename a field after extracting it from another field Logstash	7	1215	December 23, 2019
Use Mutate after KV filter Logstash	4	687	July 15, 2020
Logstash mutate not working after kv filter applied Logstash	7	619	June 1, 2022
Want to Change a Field Name (Not a Field Value) Logstash	2	16684	July 6, 2017
Rename Fields Logstash	2	323	June 14, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Rename field after extracting it from another field

Related topics