logstash split message from log4net into two fields -


we new using logstash , parsing log4net messages. in message field have string output

some random application name - random message 

i tried use gsub => ["message", "-", "app name"] changed string , not add new field. best way application name new field , remove message field?

thank in advanced help.

how grok{} pattern:

   %{data:app} - %{greedydata:otherstuff} 

Comments

Popular posts from this blog

android - net_scheduler holding wakelock -

sql - MySQL : Getting Entries from a many-to-many table -

java - Retrieving data from database using jsp (Hibernate + Spring + Maven) -