I want to split the above data at every space and assign them to different fields and the new fields should get reflect in the kibana discovery portal.
How can we do that?
I've tried to use scripted field in kibana, but I am unable to achieve it as I am not aware of scripted field querying.
@warkolm These are IIS logs getting shipped by Filebeat. The last field '10' is time-taken is somehow the not getting shipped. So I decided to split and assign the last value to a new field so that it gets showed in Kibana discovery portal.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.