看,灰机...

logstash中如何将一个json中key的value作为一个新的field

Logstash | 作者 yanzi | 发布于2020年06月10日 | 阅读数:1744

比如:{
      "@version" => "1",
        "hourse" => "true",
         "money" => 6,
          "date" => "2020-06-08 17:14:14.180",
      "thinkpad" => "[{name:aus,age:11,sex:dog}]",
    "@timestamp" => 2020-06-10T08:20:10.831Z,
           "job" => "搬砖",
          "test" => [
        [0] "[{name:dell,age:12,sex:boy}]",
        [1] "[{name:aus,age:11,sex:dog}]"
    ],
          "dell" => "[{name:dell,age:12,sex:boy}]",
      "username" => "我11",
          "host" => "k8s-node01",
          "path" => "/usr/local/logstash-6.6.2/test1.txt"
}
目前"dell"是写死的,我想要让这个名字变为它里面name的值
已邀请:

要回复问题请先登录注册