logstash split message from log4net into two fields -


we new using logstash , parsing log4net messages. in message field have string output

some random application name - random message 

i tried use gsub => ["message", "-", "app name"] changed string , not add new field. best way application name new field , remove message field?

thank in advanced help.

how grok{} pattern:

   %{data:app} - %{greedydata:otherstuff} 

Comments

Popular posts from this blog

java - pagination of xlsx file to XSSFworkbook using apache POI -

Unlimited choices in BASH case statement -

apache - How do I stop my index.php being run twice for every user -