I'm trying to write a mutate filter that will replace a certain set of symbols as well as a string in a certain field that we've defined. Currently we're trying to do something like :slight_smile :slight_smile :
mutate {
add_field => { "event_type" => "" }
gsub => [
"application","string[\="]",""
]
}
What I want the above to do is replace the word string, backslashes, equal signs and quotation marks. This isn't working as expected, so we would appreciate any help that anyone can provide. We'd prefer to keep this as one line per field, which is why I don't just seperate the gsub for the string and the special characters.