Using gsub for multi line patterns

Elastic Stack Logstash
2

You could start with

mutate { gsub => [ "message", "(?!\A)\*\*\*\*[\s0-9a-zA-Z:]+/", " " ] }
2 Likes