fix for #35

bitsofinfo · web-flow · commit 4a844ed56b36 · 2017-05-19T10:21:12.000-06:00
fix for #35
diff --git a/2030_filter_section_c_parse.conf b/2030_filter_section_c_parse.conf
@@ -7,10 +7,8 @@ filter {
     #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
     if [rawSectionC] =~ /.+/ {
-      grok {
-        match => {
-          "rawSectionC" => "(?<requestBody>.+)"
-        }
+      mutate {
+          add_field => { "requestBody" => "%{rawSectionC}" }
       }
     }
   }

Original file line number	Diff line number	Diff line change
`@@ -7,10 +7,8 @@ filter {`
`7`	`7`	`#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`
`8`	`8`
`9`	`9`	`if [rawSectionC] =~ /.+/ {`
`10`		`- grok {`
`11`		`- match => {`
`12`		`- "rawSectionC" => "(?<requestBody>.+)"`
`13`		`- }`
	`10`	`+ mutate {`
	`11`	`+ add_field => { "requestBody" => "%{rawSectionC}" }`
`14`	`12`	`}`
`15`	`13`	`}`
`16`	`14`	`}`