I'm consuming yum.log with filebeat, this is great but I want to be able to manipulate the data as it comes in to allow me to filter better and visulise the data.
At the moment a message looks like this
"message": "Apr 19 15:13:42 Updated: ec2-utils-0.7-43.5.amzn1.noarch",
I would liek to be able to pull out the date (as a timestamp), whether it was Updated/Installed and the package name.
Is this possible?