String split

I use the following syntax to split a string...but its not working...

filter {
split {
field => ["title"," "]
}
}

But its not working......I want to split a string and want to store as a list.
For example: He is a boy
splitdata[
He,
is,
a,
boy
]

Any idea...about this....Thanks

The split filter splits a single event into multiple events which isn't what you're looking for. Use a mutate filter and its split option instead.

Solved problem...Thanks. For any person who will search..same question can follow the below methods to split a string...like this..

filter {
mutate {
split => { "fieldname" => " " }
}
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.