Splitting table based on text value

As a complete elastic-newbie, how could I split a column based on its text value?
I.e. Instead of splitting rows on different Field values (e.g. country), I want to split it based on WHETHER a field starts with a certain combination of letters, or not. Hope that makes sense.

You can probably do that in an ingest pipeline, with the split processor and a
conditional (example)

This part of the example

"if": "ctx.url?.scheme =~ /^http[^s]/"

uses regexp similar to what you're asking.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.