For loop in logstash -



For loop in logstash -

i have event in logstash looks like:

{ "terms" : { "a" : 1, "b" : 0.5, "c" : 1.6 } }

i alter to:

{ "terms" : [ "a", "b", "c" ] }

i didn't find documentation for loop or keys of dictionary.

i like:

filter { key in [terms]{ mutate { merge => ["tmp_terms", key] } mutate { remove_field => ["terms"] rename => ["tmp_terms", "terms"] } }

any suggestions ?

logstash doesn't have loop build can utilize ruby plugin:

filter { ruby { code => "event['terms'] = event['terms'].keys" } }

for-loop logstash

Comments

Post a Comment

Popular posts from this blog

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* -

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* - i've inherited doc publishing process takes docbook , builds html , pdf output, using apache fop both. project had been started, never completed. lots of tweaking, i've able of doc sets build (20+), except handful, , fail severe code 1 of these 2 conditions: "fo:flow" missing kid elements. required content model: marker* "fo:block" not valid kid of "fo:root" the xml output comes out of docbook , docbook-fop checks out well-formed. the fop error in 1 book, "endecagloss", example, points end of string: <fo:flow flow-name="xsl-region-body" start-indent="4pc" end-indent="0pt"/> here’s log output in case: [java] severe: javax.xml.transform.transformerexception: file:/scratch/publishing/hudson/jobs/build-main-endeca-documentation/workspace/serverdoc/w...
Read more

mediawiki - How do I insert tables inside infoboxes on Wikia pages? -

mediawiki - How do I insert tables inside infoboxes on Wikia pages? - i want insert tables in infoboxes. example, have proteinbox i've developed using infobox template (http://health-and-medicine.wikia.com/wiki/template:proteinbox), , fasta field big fit comfortably in proteinbox. hence collapsible table within box. this tried: {{infobox | row 1 = {| class = "mw-collapsible mw-collapsed wikitable" |- | <!-- table content --> |} }} your problem is, putting nested table within template. pipe characters ( | ) in table syntax collides pipe usage in templates. the commonly used hack around create template called template:! , containing pipe character, , utilize when need set tables, parser functions or other stuff using pipe characters, within templates. table (with every | replaced {{!}} ): {{{!}} {{!}}- {{!}} a1 {{!}} b1 {{!}}- {{!}} a2 {{!}} b2 {{!}}} ...the equivalent of {| |- | a1 | b1 |- | a2 | b2 |} furthermore, hav...
Read more

SQL Server : need assitance parsing delimted data and returning a long concatenated string -

SQL Server : need assitance parsing delimted data and returning a long concatenated string - ok, have table mfbrw column serv_cde_list_osi this list separated space; each code 2 characters in length. entire string can 0 – 100 codes long. id | active_products__c | serv_cde_list_osi ____________________________________________ 1 | | aa ae ag 2 | | aa ag 3 | | aa ae lp and have table authcodes columns authcode , servicename id | authcodes | servicename __________________________________ 1 | aa | beer 2 | ae | coffee 3 | ag | coke 4 | lp | water i need authcode.servicename each code in mfbrw.serv_cde_list_osi , write name, 1 long string @ mfbrw.active_products__c id | active_products__c | serv_cde_list_osi ____________________________________________ 1 | beer; coffee; coke | aa ae ag 2 | beer; coke; | aa ag 3 | beer; coffee; ...
Read more