logstash mutate 类型转换

               

 logstash-filter-mutate 插件是Logstash 另一个重要插件,它提供了丰富的基础类型数据处理能力,包括类型转换,字符串处理和字段处理等1.类型转换类型转换是logstash-filter-mutate 插件最初诞生时的唯一功能,可以设置的转换类型包括："integer"，"float" 和 "string"。示例如下：input {   stdin {     } }filter {  grok {   match =>{   "message" =>"(?<request_time>\d+(?:\.\d+)?)"     }}}output {   stdout {   codec =>rubydebug   }}[elk@Vsftp logstash]$ logstash -f t2.conf Settings: Default pipeline workers: 4Pipeline main started23.45{         "message" => "23.45",        "@version" => "1",      "@timestamp" => "2017-01-11T02:07:33.581Z",            "host" => "Vsftp",    "request_time" => "23.45"}字符串 转换为float型[elk@Vsftp logstash]$ cat t2.conf input {   stdin {     } }filter {  grok {   match =>{   "message" =>"(?<request_time>\d+(?:\.\d+)?)"     }    }     mutate {        convert => ["request_time", "float"]}}output {   stdout {   codec =>rubydebug   }}[elk@Vsftp logstash]$ logstash -f t2.conf Settings: Default pipeline workers: 4Pipeline main started23.45{         "message" => "23.45",        "@version" => "1",      "@timestamp" => "2017-01-11T02:10:07.045Z",            "host" => "Vsftp", 字符串转换成数值型:[elk@Vsftp logstash]$ cat t2.conf input {   stdin {     } }filter {  grok {   match =>{   "message" =>"(?<request_time>\d+(?:\.\d+)?)"     }    }     mutate {        convert => ["request_time", "integer"]}}output {   stdout {   codec =>rubydebug   }}[elk@Vsftp logstash]$ logstash -f t2.conf Settings: Default pipeline workers: 4Pipeline main started23.45{         "message" => "23.45",        "@version" => "1",      "@timestamp" => "2017-01-11T02:11:21.071Z",            "host" => "Vsftp",    "request_time" => 23}

           

再分享一下我老师大神的人工智能教程吧。零基础！通俗易懂！风趣幽默！还带黄段子！希望你也加入到我们人工智能的队伍中来！https://blog.csdn.net/jiangjunshow