How do I go from:
”metrics=[a=1,b=2,c=3]”
”metrics=[a=2,b=5,c=6]”
”metrics=[a=1,c=3,c=4]”
To:
“a,b,c”
“1,2,3”
“2,5,6”
“1,3,4”
- There are a lot more key, value pairs in here, so I don't want to rex them out manually
- `extract` didn't work I'm using a remotesyslog streaming mechanism (no props.conf, transform.conf)
- Splitting by comma gave me a multivalue field, I couldn't manage to get much further - I wanted a `foreach value`
thanks
↧