Aggregating json events

Hey guys,

So I am using HTTP poller input plugin to get Json formatted replies from two URLs. I want to aggregate the two events based on a common field. Is there any direct plugin to do it? Any help is appreciable. Thanks.

With question like this you will not get good answers.

Because:

  • Not enough information. It helps if you give information on the data you are consuming, endpoints you are using, version of logstash you are using, operating system in use, etc.
  • Your question does not show any effort on your part. This is a community driven site. So everybody is here for free. We will not do your work for you. But we will help.

Have you done some research?
I suggest:

I think what you are looking for is the aggregate filter. See https://www.elastic.co/guide/en/logstash/current/plugins-filters-aggregate.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.