logging - Logstash: Copy array field into another -
logging - Logstash: Copy array field into another -
i know if there simple way in logstash re-create elements of 1 field array another. set way, there way re-create nested fields of top-level field top-level field?
i'm having problem because i'm dealing nonstandard multiline log format not thread-safe. in order create sure info need , in right order, i'm on planning on throwing every relevant value of each type array, , sorting them out later. problem i'm having logstash doesn't seem back upwards much array manipulation. if think approach won't work @ in logstash, suggestions instead appreciated.
thanks!
as question shows: logstash: how create re-create of @timestamp field while maintaining same time format? can utilize ruby filter re-create array.
filter { ruby { code => "event['another_top_level_field'] = event['top_level_field']" } }
arrays logging copy field logstash
Comments
Post a Comment