logstash
rbngtm1 opened this issue · 0 comments
rbngtm1 commented
I am sorry, I am getting little off the topic.
I was trying to parse input using csv filter in logstash.
I am getting output from logstash something like this:
hostname => "hostname=test_machine"
event_id => "event_id=1145"
How do I exclude the hostname= or Is there a better way to use hostname inside quotation as a field. Please help
I used
csv {
autogenerate_column_names => "false"
columns => ["hostname","event_id"]
}
mutate {
gsub => ["message", "hostname=", " "]
} But, this will mess every words 'h' 'o' 's' and so on with other parsed messages and I don't think its the better way. Please suggest me the way.
The output I want is:
hostname => "test_machine"
event_id => "1145"