Hi all. We are trying to visualize the count of users connected to our VPN from the event.original field (Cisco FirePower syslogs collected through filebeat) but are unsure how to strip and only show users instead of the whole message string: Indexed Data event.original %FTD-6-722022: Group <RA-VP…

Visualize specific string from field

Jose_H April 23, 2020, 12:13pm 5

Regex is the way to go but I was unable to create or find a script close to the solution wanted to return the substring.

Topic		Replies	Views
Regex on filtered data on Kibana Kibana	8	382	February 8, 2023
Visualisation Painless script between two characters Kibana	8	856	May 25, 2021
Kibana string manipulation Kibana	2	636	February 22, 2021
How to use the script field for string Kibana	9	5993	April 20, 2020
Parse a Json Field in a visualization Kibana	5	5941	February 23, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Visualize specific string from field

Related topics