且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

grok mutate gsub的语法以单引号替换双引号

更新时间:2023-11-25 21:30:04

您想要这个吗? mutate过滤器会将所有双引号更改为单引号.

Do you want this? The mutate filter will change all the double quote to single quote.

filter {    
    mutate {
        gsub => ["message","\"","'"]
    }
}