Skip to content

Instantly share code, notes, and snippets.

@quoeamaster
Created December 5, 2019 07:53
Show Gist options
  • Select an option

  • Save quoeamaster/346ca76ae02a365edc8885e39f816b1a to your computer and use it in GitHub Desktop.

Select an option

Save quoeamaster/346ca76ae02a365edc8885e39f816b1a to your computer and use it in GitHub Desktop.
POST _ingest/pipeline/_simulate
{
"pipeline": {
"processors": [
{
"dissect": {
"field": "message",
"pattern": "%{user_id}:%{action}:%{action_id}:%{action_ts}:%{description}"
}
},
{
"date": {
"field": "action_ts",
"formats": ["yyyy/MM/dd HH-mm-ss"],
"target_field": "action_ts"
}
},
{
"remove": {
"field": [
"message"
]
}
}
]
},
"docs": [
{
"_source": {
"message": "jaime_10234:filling_procurement_form:12_yuy190:2019/04/18 13-12-09:procurement for ABC company on spare parts"
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment