<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>logging on bascht.com</title><link>https://bascht.com/tags/logging/</link><description>Recent content in logging on bascht.com</description><generator>Hugo -- gohugo.io</generator><language>de-de</language><lastBuildDate>Mon, 08 Aug 2016 00:00:00 +0000</lastBuildDate><atom:link href="https://bascht.com/tags/logging/index.xml" rel="self" type="application/rss+xml"/><item><title>Access Logstash JSON objects</title><link>https://bascht.com/tech/2016/08/08/access-logstash-json-objects/</link><pubDate>Mon, 08 Aug 2016 00:00:00 +0000</pubDate><guid>https://bascht.com/tech/2016/08/08/access-logstash-json-objects/</guid><description>If you want to access Logstash log values buried deep in objects, be sure to use the bracket-syntax, as [object.field.name] won&amp;rsquo;t get you anywhere. This is the way to go, e.g. for mutate{}:
mutate { rename =&amp;gt; { &amp;#34;[object][field][name]&amp;#34; =&amp;gt; &amp;#34;new_field&amp;#34; } }</description></item></channel></rss>