Using Csv filter on a Split value

(Sahar Q) #1

I used mutate and split in order to split the data im getting, i want to pass each of the value i spilted on the csv filter but i dont get how to do it, any help?

this is my current config:

mutate {
split => {"message" => "|"}
csv {
columns => [
"ip address",
"physical address",
separator => ","

this is part of the input data:


(Mark Walkom) #2

Please don't post multiple threads on the same question :slight_smile:

(Mark Walkom) #3