Hello,
I want to ship logs from different log source. I need to add a tag to each different log sources.
This conf doesn' t work !
input {
beats {
port => 5044
}
}
filter {
if [ source ]=="xxx.log" {
mutate {
add_tag => [ "Gvrs" ]
}
}
if [ source ]=="xxx.log" {
mutate {
add_tag => "Demo"
}
}
}
output {
gelf {
host => "xxx.xxx.xxx.xxx"
port => 5044
protocol => "udp"
}
}