2023年7月17日发(作者：)

logstashmutate类型转换

logstash-filter-mutate 插件是Logstash 另⼀个重要插件,它提供了丰富的基础类型数据处理能⼒,包括类型转换,字符串处理和字段处理等1.类型转换类型转换是logstash-filter-mutate 插件最初诞⽣时的唯⼀功能,可以设置的转换类型包括："integer"，"float" 和 "string"。⽰例如下：input { stdin { } }filter { grok {

match =>{ "message" =>"(?d+(?:.d+)?)" }}}output { stdout { codec =>rubydebug }}[elk@Vsftp logstash]$ logstash -f Settings: Default pipeline workers: 4Pipeline main started23.45{ "message" => "23.45", "@version" => "1", "@timestamp" => "2017-01-11T02:07:33.581Z", "host" => "Vsftp", "request_time" => "23.45"}字符串 转换为float型[elk@Vsftp logstash]$ cat input { stdin { } }filter { grok {

match =>{ "message" =>"(?d+(?:.d+)?)" } } mutate { convert => ["request_time", "float"]}}output { stdout { codec =>rubydebug }}[elk@Vsftp logstash]$ logstash -f Settings: Default pipeline workers: 4Pipeline main started23.45{ "message" => "23.45", "@version" => "1", "@timestamp" => "2017-01-11T02:10:07.045Z", "host" => "Vsftp", 字符串转换成数值型:[elk@Vsftp logstash]$ cat input { stdin { } }filter { grok { match =>{ "message" =>"(?d+(?:.d+)?)" } } mutate { convert => ["request_time", "integer"]}}output { stdout { codec =>rubydebug }}[elk@Vsftp logstash]$ logstash -f Settings: Default pipeline workers: 4Pipeline main started23.45{ "message" => "23.45", "@version" => "1", "@timestamp" => "2017-01-11T02:11:21.071Z", "host" => "Vsftp", "request_time" => 23}

再分享⼀下我⽼师⼤神的⼈⼯智能教程吧。零基础！通俗易懂！风趣幽默！还带黄段⼦！希望你也加⼊到我们⼈⼯智能的队伍中来！