Query Transformation Exctract field with regexp and capture group

[kyrianae]

Why is this needed:
some project always use Elastisearch for logs and sometimes all is not well indexed
be able to extract some sub parts of field could be usefull

What would you like to be added:
Extract field aveclogfmt and json format, capability to add a regex with group could be nice and quick win for use case

Who is this feature for?
All people that are not able to split string in the query, elastic users (with bad indexation)

[gabriel-check24]

I'd also love to have this feature.
From a quick glance it seems like simply adding a new regex type to this file and then using the group names as keys and their matches as values is enough.
@tonypowa Is this feature planned/can I do anything to get it sooner?

[tonypowa]

hi @gabriel-check24

there is already a draft PR regarding this feature request

There's no estimated time when the author will provide or deliver, but everyone is welcome to pick it up if they want to work on it without having to start from scratch.

[github-actions]

This issue has been automatically marked as stale because it has not had activity in the last year. It will be closed in 30 days if no further activity occurs. Please feel free to leave a comment if you believe the issue is still relevant. Thank you for your contributions!

[github-actions]

This issue has been automatically closed because it has not had any further activity in the last 30 days. Thank you for your contributions!