Scripted fields in kibana

dinesh1 · June 29, 2018, 4:05am

HI,

how to create scripted field for my logs in kibana. I need to create field for trace.
MY log example is shown below.

{“@timestamp”:29T03:45:00.000+00:00","severity":"INFO","service":"trackservice","trace":"f83d0eaddee54359","span":"eaddee54359","parent":"","exportable":"false","pid":"1","thread":"pool-4-thread-1","class":"c.m.r.p.trackerService.Tracker","rest":"Now Tracker Service started !!!!!!!!!"}

Thanks.

warkolm · June 29, 2018, 4:07am

Do you mean you want to extract that field?

dinesh1 · June 29, 2018, 4:08am

yes.

dinesh1 · June 29, 2018, 4:11am

like this i want,with the name trace

warkolm · June 29, 2018, 5:11am

You need to do that before index time, doing it afterwards is super difficult and expensive.

dinesh1 · June 29, 2018, 5:15am

can you please help me how to do it before indexing.

warkolm · June 29, 2018, 9:26pm

How are you sending the data to Elasticsearch?

dinesh1 · July 4, 2018, 10:17am

Iam using filebeat and logstash.

warkolm · July 4, 2018, 10:38am

Then it might be worth making a topic in #logstash with your config and a sample doc

system · August 1, 2018, 10:39am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.