Is it possible to chain field extractors?
I'm trying to conditionally extract fields from the url field already extracted from the log, when the url matches a certain pattern. I'm currently hoping to chain a field extractor using the where operator to filter the log entries to another field extractor that does the general extraction (extracting the url field). I'm open to other approaches to solve this problem.
Please sign in to leave a comment.