Xml filtering subfields

Elastic Stack Logstash
21

Oh, maybe

    init => '
        FieldName = "[theXML][Event][EventData][Data]"
    '
    code => '
        e = event.get(FieldName)

works? I cannot test it just now.

23

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.