- Version: 6.4.2
- Operating System: RHEL
- Config File:
input {
generator {
lines => [
"1|2:3"
]
count => 1
}
}
filter {
dissect {
mapping => {
"message" => "%{a}|%{b}"
"b" => "%{c}:%{d}"
}
add_field => {"e" => "%{b}"}
}
}
output {
stdout {
codec => rubydebug
}
}
{
"a": "1",
"b": "2:3",
"c": "2",
"d": "3",
"e": "2:3"
}
{
"a": "1",
"b": "2:3",
"c": "2",
"d": "3",
"e": [
"2:3",
"2:3"
]
}