I have winbeats installed and things are working great. I have a field that is called: event_data.RuleName and an actual value is: technique_id=T1130,technique_name=Install Root Certificate I would like to split that field into two fields. One technique_id and the other technique_name. Each …

Split a field in elastic search

Tim_Rice (Tim Rice) March 20, 2019, 1:16pm 8

BenTrent, YOU ARE THE MAN!!!! Everything works perfectly!

1 Like

Topic		Replies	Views
Ingest pipeline split MESSAGE field into multiple fields Kibana	7	2520	August 2, 2022
Split the field and add the fields dynamically in ingest pipeline Elasticsearch	1	323	August 19, 2021
How to split a field value into separated fields in elasticsearch Elasticsearch elastic-stack-alerting	7	2952	September 3, 2020
Ingest pipeline - How to stores the split values into separate new fields? Elasticsearch	3	3167	October 21, 2019
How to splite one field to N fields with pipelineAPI Elasticsearch	1	326	June 30, 2020