Is it possible to extract dynamic field name with grok? For instance, I have the following message:
Test message key=value key_1=value_1 key_2=value_2 ... etc The number n in key_n=value_n is not specified and may vary from message to message. I need to extract all fields but with key1 and key3: key=value key_2=value_2 key_4=value_4 key_5=value_5 key_6=value_6 //etc... How can I do this? Is it possible to do with GROK? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9f886151-7cc3-4b0e-8416-79ad2bd0b76b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
