Rewrite message, cut base64string and forward it to Graylog

Graylog Central (peer support)
1

Im sending logs data via filebeat to my graylog2 server and I want to rewrite this message here:

ERROR [2018-05-20 11:35:28,204] [pool-tread-3] Filter - [Number-155], [PUT] [http://localhost/Item] ==>> {“Item”:{“file”:“base64string”,"}}

I want to remove this base64string from the message before forwarding it to graylog2.

Is this possible and how? If someone has some examples it would be nice.

Thanks

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.