How do I split a field and put the split strings into multiple target fields using split processor in Elasticsearch ? For e.g, I have a logline https://live-integration-msp-edge.connectcdn.net/mm/dash/live/7047/LIVESERVICE_7001/TG_STB_HD.mpd?antid=VU5LTk9XTi1XSElURUxJU1Q%3D&i=1&ih=in&nwk=WIFI&pk=1&…

If I understand correctly, your uri_path has an internal well defined structure. In this case you could use the dissect processor on the URL field, and assign different parts of this field to your additional variables.

Discuss the Elastic Stack

Split Processor:

Elastic Stack Elasticsearch

Sharad_Ananth (Sharad Ananth) February 19, 2019, 5:02am 4

@Magnus_Kessler Thank you. It helped.

Topic		Replies	Views
How to split a field value into separated fields in elasticsearch Elasticsearch elastic-stack-alerting	7	2921	September 3, 2020
Ingest pipeline - How to stores the split values into separate new fields? Elasticsearch	3	3158	October 21, 2019
Split a field in elastic search Elasticsearch	7	756	April 17, 2019
Ingest pipeline processor split Elasticsearch	3	1362	November 10, 2017
Can I apply split processor on more than one field? Elasticsearch	3	541	March 18, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Split Processor:

Related topics