Scripted fields in kibana


#1

HI,

how to create scripted field for my logs in kibana. I need to create field for trace.
MY log example is shown below.

{“@timestamp”:29T03:45:00.000+00:00","severity":"INFO","service":"trackservice","trace":"f83d0eaddee54359","span":"eaddee54359","parent":"","exportable":"false","pid":"1","thread":"pool-4-thread-1","class":"c.m.r.p.trackerService.Tracker","rest":"Now Tracker Service started !!!!!!!!!"}

Thanks.


(Mark Walkom) #2

Do you mean you want to extract that field?


#3

yes.


#4

like this i want,with the name trace

image


(Mark Walkom) #5

You need to do that before index time, doing it afterwards is super difficult and expensive.


#6

can you please help me how to do it before indexing.


(Mark Walkom) #7

How are you sending the data to Elasticsearch?


#8

Iam using filebeat and logstash.


(Mark Walkom) #9

Then it might be worth making a topic in #logstash with your config and a sample doc :slight_smile:


(system) #10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.