Prefixing parsed key/value values

SpringerPE · Dec 17, 2018 · cb94e95 · cb94e95
1 parent b6313ca
commit cb94e95
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/manifest/operations/pipelines/cf-platform-es/filter-10-syslog_rfc5424_parsing.conf b/manifest/operations/pipelines/cf-platform-es/filter-10-syslog_rfc5424_parsing.conf
@@ -32,6 +32,7 @@ filter {
       kv {
         # Convert the structured data into fields
         source => "syslog5424_sd"
+        prefix => "sd_"
         remove_field => [ "syslog5424_sd" ]
         trim_key => "\["
         trim_value => "\]"