Hello I am using a CSV parser. I have the following log {"data": "1,john,23","AdditionField": "abcd","AdditionField2": "12345"}
Now I have set the raw message strategy to 'ENVELOPE' and the messageField to 'data' However after the record is indexed in elasticsearch, the parser does parse the value inside data but it does not get the additional fields as shown in the original log that is 'AdditionField' and 'AdditionField2'. What am I doing wrong? Can anyone help? Thanks! --- This email has been checked for viruses by AVG. https://www.avg.com