In case anyone needs it, we used grok to achieve this:

if [path] =~ "Tracer" {
        grok {
                patterns_dir => ["./extra_patterns"]
                match => {
                        "message" => "^\n%{USERNAME:id} >>>
\(%{USERNAME:routeId}\) %{GREEDYDATA:source} --> %{GREEDYDATA:destination}
<<<\n, Pattern:%{WORD:pattern}\n,
Headers:{%{MULTILINEGREEDYDATA:headers}}\n, BodyType:%{JAVAFILE:bodyType}\n,
Body:%{GREEDYDATA:body}"
                }
        }
        kv {
                source => "headers"
                field_split => ","
        }
  }




--
View this message in context: 
http://camel.465427.n5.nabble.com/Camel-Tracer-and-Logstash-tp5788502p5788689.html
Sent from the Camel - Users mailing list archive at Nabble.com.

Reply via email to