Rename fields name with Logstash

Elastic Stack Logstash
1

How to rename for clarity

Can someone kindly help with this? Thank you.

filter {
mutate {
rename => { "[test][rex-platform"\\" ]" => "[test][rex-platform]" }
}
}

Output Display Field is like this:

Table format
Column1
test.rex-platform"\

Column2
Windows"",

2

Welcome to the community!

How did you import data? Which input plugin? CSV perheps

Can you show us pic, screen shoot, how does exactly field look like? You can use debug

3

through udp

4

And the pic please

5

Here it is.

image
image470×103 1.98 KB

6

According to my tests, try with the single quotes:

  mutate { 
      rename => { '[test][rex-platform"\\" ]' => "[test][rex-platform]" }
 }
7

Still having the isuues

image
image433×142 2.01 KB

8

As I said, provide the debug screens from Logstash

9

Hello,

Yes i see with single quotes it is working

rename => { '[test][rex-platform"\]' => '[test][rex-platform]' }

Still , if issue persists please share the debug screens as requested by Rio.

Thanks!!

10

Thank you so much, fix the rename field. How about in the value field? It’s still Windows““,

image
image336×123 1.82 KB

11

Hello,

For value you can try to use gsub

rename => { '[test][rex-platform"\]' => '[test][rex-platform]' }
	  gsub => [
      '[test][rex-platform]', '"', '',
      '[test][rex-platform]', ',', ''
    ]

Thanks!!

2 Likes
12

Now fully got it. Thanks for your support.

1 Like