Aggregate logs when fields are common in events

Elastic Stack Logstash
1

How can I aggregate events in logstash whenever let say the sourceAddress, username and sitename fields are equal in events and be aggregated in one event

for example the events below:
10.40.1.10 - James - facebook.com
10.40.1.10 - James - google.com
10.40.1.12 - Katy - twitter.com
10.40.1.10 - James - facebook.com

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.