Pipelines for extracting multiple pieces

(Johnb) #1

So if i was looking to extract a bunch of data from a log entry like logstash i would probably be looking at creating pipelines? It seems extractors are good for grabbing single things from a log entry correct?

(Jochen) #2

It depends. The Grok and JSON extractors are perfectly capable of creating more than one new message field.

(system) closed #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.