Hi,
I am not able to compare empty string and do the necessary operation in logstasgh. Below is my logstash config file line
if [fields][type] == "serverlog"{
grok {
match => {"message"=> "%{DATE:log_date}%{SPACE}%{TIME:log_time}%{SPACE}%{LOGLEVEL:level}%{SPACE}[%{DATA:class}]%{SPACE}%{GREEDYDATA:Log_message}"}
}
if [message][class] == "" {
drop {}
}
Please guide me to figure out the wrong. Thank you in advance