Using Logstash to modify syslog messages prior to send them to a syslog server

Elastic Stack Logstash
1

Hi,

Maybe this's a silly question, but I need to remove some part of a syslog message prior to send it to the proper syslog server. Is it possible use Logstash to do that ? How would be the config to, for example, remove an IP Address from the message, keeping the remain message, with the original timestamp, hostname, facility and severity ?

Thanks in advance.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.