Split Log Message That harvested by filebeat

Elastic Stack Elasticsearch
1

Hi guys, i got problem to splitting the log message that i store into elasticsearch using filebeat.
This is my log from kibana

message%20log
message log.PNG1160×353 28.5 KB

i want to split the 'timestamp' and 'info' to single value, and each value of 'message' will be single value too. So i can use it for visualization independently.

Thanks before for your help.

2

You need to use the Ingest API to split those fields out - https://www.elastic.co/guide/en/elasticsearch/reference/6.4/ingest.html

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.