I use the following syntax to split a string...but its not working...
filter {
split {
field => ["title"," "]
}
}
But its not working......I want to split a string and want to store as a list.
For example: He is a boy
splitdata[
He,
is,
a,
boy
]
Any idea...about this....Thanks
The split filter splits a single event into multiple events which isn't what you're looking for. Use a mutate filter and its split option instead.
Solved problem...Thanks. For any person who will search..same question can follow the below methods to split a string...like this..
filter {
mutate {
split => { "fieldname" => " " }
}
}
system
(system)
Closed
December 16, 2017, 1:22pm
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.