logstash-filter-mutate
logstash-filter-mutate copied to clipboard
For some reason the log source (which I don't control over) is sending lines with escaped signs: ``` $ cat notOK_sample.log field1 field2 field3 \"field 4\" field5 ``` I'm using...
The dest_field_value was derived before the added fields were iterated upon. This caused the subsequent `event.set`'s, when iterating over multiple `added_field_value`'s, to set the `dest_field` based on the _initial_ `dest_field_value`....
Fix for merging an array of fields into the destination using the merge mutation. I have included a test which produces the following failure prior to the fix: ``` LogStash::Filters::Mutate...
The merge mutation accepts an array of source fields to merge into a single destination field. However, this functionality is broken for an array of source fields with size >1....
For a Logstash instance with multiple "large" pipelines, I am occasionally seeing the following error: ``` [2023-04-03T13:21:54,180][WARN ][logstash.filters.mutate ] Exception caught while applying mutate filter {:exception=>"Cannot cast org.jruby.RubyArray to org.jruby.RubyString"}...
I would like to fork a small percentage (~5%) of all production data into our development Elastic cluster, but I am having a hard time finding a way to do...
- Version: Logstash 7.0.0 - Operating System: Linux Debian I have following in a Logstash pipeline: ```ruby filter { mutate { id => "rename_fields" rename => { "770" => "gprs_operator"...
Add an operation called 'omitempty' to remove fields with null or default values. (works with string "", integer 0, array [], hashes {}, and null values) ```` filter { mutate...
In our experiments with the gsub mutate filter it turned out that the documentation is a little bit misleading with respect to backslashes: escaping any backslash would deprive some regular...