Skip to content

Instantly share code, notes, and snippets.

@andrewvc
Last active October 27, 2017 21:52
Show Gist options
  • Select an option

  • Save andrewvc/1b6e5c72cf124ed39d311f9714dac271 to your computer and use it in GitHub Desktop.

Select an option

Save andrewvc/1b6e5c72cf124ed39d311f9714dac271 to your computer and use it in GitHub Desktop.

Revisions

  1. andrewvc revised this gist Aug 3, 2016. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions logstash-character-hack.conf
    Original file line number Diff line number Diff line change
    @@ -6,6 +6,7 @@ filter {
    }

    ruby {
    # Make a new field with the tab removed
    code => 'event.set("tabless", event.get("message").gsub(9.chr, ""))'
    }
    }
  2. andrewvc revised this gist Aug 3, 2016. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions logstash-character-hack.conf
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,7 @@
    input { generator {} }
    filter {
    ruby {
    # Add a \t (tab) by using its ASCII code (9)
    code => 'event.set("message", 9.chr + event.get("message"))'
    }

  3. andrewvc created this gist Aug 3, 2016.
    11 changes: 11 additions & 0 deletions logstash-character-hack.conf
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,11 @@
    input { generator {} }
    filter {
    ruby {
    code => 'event.set("message", 9.chr + event.get("message"))'
    }

    ruby {
    code => 'event.set("tabless", event.get("message").gsub(9.chr, ""))'
    }
    }
    output { stdout { codec => rubydebug {} } }