Hi, is there a way to reproduce the behavior of the message field in a custom field?
I.e. Break down per word rather than limited to full string?
My use case is the following:
I have a custom field named “loggerName” which contains string values such as “java.util.concurrent”, “com.hibernate.stats”, “org.apache.commmons”, etc.
I created an extractor (Replace with regular expression) to replace dots to whitespaces.
However when I chose “quick value” it shows a break down per “full string”.