Logstash convert IP:port to IP and port
Filter na konvert IP: port to IP a port
filter v logstash:
mutate { add_field => { "clientip" => "%{cIp}" "clientport" => "%{cIp}" } }
mutate { gsub => [ "clientip", ":[0-9\.]+", "", "clientport", "[0-9\.]+:", "" ] }
clientip – nazov noveho field
cIp – existujuci field s hodnotou IP:port
priklad vstupu logou a vystupu: