logstash-plugins / logstash-filter-dissect

Extract structured fields from an unstructured line
Apache License 2.0
13 stars 22 forks source link

Common filter options are executed multiple times #70

Open poulinjulien opened 5 years ago

poulinjulien commented 5 years ago

filter { dissect { mapping => { "message" => "%{a}|%{b}" "b" => "%{c}:%{d}" } add_field => {"e" => "%{b}"} } }

output { stdout { codec => rubydebug } }

- Expected output:

{ "a": "1", "b": "2:3", "c": "2", "d": "3", "e": "2:3" }

- Actual output:

{ "a": "1", "b": "2:3", "c": "2", "d": "3", "e": [ "2:3", "2:3" ] }

guyboertje commented 5 years ago

Confirmed on 7.0.0 too.

Investigating.