Hi all. I have been playing with ELK for a few months, and been making decent progress so far. I have an interesting problem I came across, which I haven't been able to figure out.
Let’s say you have a column that has the following integers, separated by a delimiter.
Question is then how to convert /digest / split it (in Logstash) to a newly created composition of:
In other words, simply split the integers on either side of the delimiter, that were formerly in 1 column, now split them and put them into a newly created column.
Haven’t found a way to do it. Basically, splitting these integers (yep, they are integers) .. and removing the delimiter in the process.
I could try and open it up with Excel, and manually massage the files, but then I've seen encoding issues even from a simple massage operation like that.
Would anyone have a way to do this? The KV filter doesn't do it. Doesn't seem to be a way. If anyone knows of a way to accomplish this, please advise.