Hey All, Trying to get the first 4 characters of a field that is obtained via XPATH. This is what i currently have, but it copies everything rather then the first 4 characters. Been stumped on it for the past couple hours. Open to other methods other then ruby but haven't been able to find any oth…

[image] bevano: [hostdata] is a string field that is populated earlier via using the XML XPATH If it was populated using an xml filter and xpath it will be an array unless you have already done mutate { replace => { "hostdata" => "[hostdata][0]" } }

Discuss the Elastic Stack

Ruby - First few characters (substring)

Elastic Stack Logstash

Badger August 11, 2020, 2:46pm 2

Is [hostdata] a string or an array? What does it look like in

output { stdout { codec => rubydebug } }

Topic		Replies	Views
Logstash substring a field using position Logstash	6	16085	July 6, 2017
Extract first 50 characters from message "body" into new field Logstash	5	2352	November 17, 2020
Logstash extract part of field Logstash	3	245	June 7, 2022
Logstash substring a field using position getting error Logstash	2	511	January 13, 2022
Get 10 characters before substring in logstash? Logstash	7	6732	August 22, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Ruby - First few characters (substring)

Related topics