as the topic, I was traped with this problem, I have tried serveral methods,but it still does not work at all. anybody ever met that like me ? below is my settings
if [tags][0] == "ad_api-logs" {
mutate {
add_field => { "[@metadata][logType]" => "nginx" }
}
json {
source => "message"
target => "jsonContent"
}
then use message & jsonContent. how can I solve this?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.