Skip to content

transform data #4279

Answered by kenhys
islamyakin asked this question in Q&A
Aug 24, 2023 · 1 comments · 1 reply
Discussion options

You must be logged in to vote

If parsed content is stored as record["message"] = "GET /wp-content/plugins/backupbuddy/lib/zipbuddy/ HTTP/1.1",
using @type record_transformer will work for you.

<filter *>
  @type record_transformer
  enable_ruby true
  <record>
    message ${record["message"].sub(/ HTTP\/1.1$/, '')}
  </record>
</filter>

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@islamyakin
Comment options

Answer selected by islamyakin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants