Unable to convert string to integer in log stash in XML

Elastic Stack Logstash
1

Hi Team,

I am unable to convert data type in logstash, my configurations are shown below.

Logstash
filter{
if ("ccn" in [tags]) {
xml {
store_xml => false
source => "message"
xpath =>
[
"/mv/moid/text()", "ccncounters",
"/mv/r/text()", "r_value"
]
}
mutate {
convert => {
"r_value" => "integer"
}
}
kv{
source => "ccncounters"
field_split => ", "
}
}

}

sample logs

CcnCounters=SDP-Lookup-Failed-Subscriber-Not-Found, Source = _SYSTEM
6

2

What does you XML look like? You need to use markdown to prevent the browser eating your XML.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.