Using Csv filter on a Split value


(Sahar Q) #1

I used mutate and split in order to split the data im getting, i want to pass each of the value i spilted on the csv filter but i dont get how to do it, any help?

this is my current config:

filter{
mutate {
split => {"message" => "|"}
}
csv {
columns => [
"interface",
"ip address",
"physical address",
"type"
]
separator => ","
}
}

this is part of the input data:

"192.168.56.1","225.0.0.251","ff-ff-ff-ff-ff-ff","static"|
"192.168.56.1","225.0.0.252","01-00-5e-00-00-16","static"|
"192.168.56.1","225.0.0.253","01-00-5e-00-00-fb","static"|
"192.168.56.1","225.0.0.254","01-00-5e-00-00-fc","static"|
"192.168.56.1","225.0.0.255","01-00-5e-00-00-fd","static"|


(Mark Walkom) #2

Please don't post multiple threads on the same question :slight_smile:


(Mark Walkom) #3