Hi, I want to replace 6 to TCP and 17 to UDP in the PROTOCOL field. this is my logstash config: input{ tcp{ host => "163.19.X.X" port => 5510 codec => json } } filter{ if [PROTOCOL] == "6"{ mutate{replace => {"PR…

Replace multiple value in a specified field

Badger June 12, 2018, 6:59am 6

FYI a translate filter would be another way of doing this. For 3 values I don't think it matters which one you use.

1 Like

Topic		Replies	Views
Replace one value with another logstash Logstash	3	224	February 24, 2023
Logstash mutate replace field Logstash	7	3413	May 16, 2017
I want to replace the value of a field if its value is a certain number Logstash	1	333	January 20, 2020
Replace field content Logstash	4	4713	January 1, 2018
Mutate change field to another Logstash	4	911	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Replace multiple value in a specified field

Related topics