adding extra filters to extract the information

duplocloud · Nov 28, 2024 · 5cced8a · 5cced8a
1 parent eff08fc
commit 5cced8a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/diagnostics/opensearch/logstash/logstash.conf b/diagnostics/opensearch/logstash/logstash.conf
@@ -4,6 +4,16 @@ input {
   }
 }
 
+filter {
+    json {
+        source => "message"
+        remove_field => ["message"]
+    }
+    split {
+        field => "records"
+    }
+}
+
 output {
     opensearch {
         hosts =>  ["${OPENSEARCH_HOST}:9200"]