Hi there, i plan to split field into multiple document based on OID. So, i have configured snmp pipeline for my network device. I managed to monitor the cpu and memory usage but i'm facing problem when i want to monitor network traffic on this device. in my pipeline configuration, i already add con…

I think you would have to use a ruby filter. You could start with something like ruby { code => ' a = [] event.to_hash.each { |k, v| k.match(/sysOREntry\.(\w+)\.(\d+)$/) { |m| i = m[2].to_i a[i] ||= {} …

Discuss the Elastic Stack

Split Document into multiple document based on condition

Elastic Stack Logstash

Badger October 20, 2022, 4:05pm 5

I cannot imagine why that ruby filter would cause an OOM error. See this thread for how to deal with that.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.