How to parse the message field in ingress-nginx from kubernetes, splitting it into an error code, etc.?

Question

Nginx

There is kubernetes. It has ingress-nginx which logs nginx logs.
filebeat installed. But it doesn't parse the message field.

How to parse the message field in ingress-nginx from kubernetes, splitting it into an error code, etc.?
Can use fluent-bit, fluentd?

Answer 1

You need to process messageit depending on where you write filebeat there:

Logstash: write a pipeline for processing in it, there are thousands of manuals.

Elasticsearch Ingest: write a processor

Other receiving side: see how to filter and parse specifically in it.