logstash split message from log4net into two fields -
we new using logstash , parsing log4net messages. in message field have string output
some random application name - random message i tried use gsub => ["message", "-", "app name"] changed string , not add new field. best way application name new field , remove message field?
thank in advanced help.
how grok{} pattern:
%{data:app} - %{greedydata:otherstuff}
Comments
Post a Comment