Rewrite message, cut base64string and forward it to Graylog

Im sending logs data via filebeat to my graylog2 server and I want to rewrite this message here:

ERROR [2018-05-20 11:35:28,204] [pool-tread-3] Filter - [Number-155], [PUT] [http://localhost/Item] ==>> {“Item”:{“file”:“base64string”,"}}

I want to remove this base64string from the message before forwarding it to graylog2.

Is this possible and how? If someone has some examples it would be nice.

Thanks

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.