用于将逗号分隔消息提取到它自己的字段的 ksql 语句

Question

我有一个 JSON 对象，它的字段较少。

{
"@timestamp": "2019-01-14T14:34:47.617Z",
"message": "20190114T063447-0800,dm-2,SSD2T-backarea,1.99,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00,0.00",
"node": "hostnameA",
}

将 message 字段分解为自己的字段并保留 node 和 @timestamp 的正确方法是什么？

Answer 1

我认为这是不可能的。您会寻找某种 SPLIT 函数，但目前不存在。我已将其记录为建议的增强功能 here。

您的数据来自哪里？您是否可以选择将 message 字段改为结构化 JSON？或者以逗号分隔的整个有效负载？

用于将逗号分隔消息提取到它自己的字段的 ksql 语句

ksql statement for extracting comma delimited message to it is own fields

ksqldb