If I understand, it try to interprat "%{host}" as a hostname ?
It tries to expand %{host} into the contents of the host field, but the event in question apparently doesn't have such a field so it leaves the string alone.
If I understand, it try to interprat "%{host}" as a hostname ?
It tries to expand %{host} into the contents of the host field, but the event in question apparently doesn't have such a field so it leaves the string alone.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.