I'm thinking about using the mutate
filter and the rename
option, but I don't know about the corresponding regex to achieve that:
filter {
mutate {
rename => {
"any_field_with_underscore" => "anyfieldwithunderscore" # i don't know how to write regex for this ...
}
}
}
Can anyone help?
See Question&Answers more detail:os