I know the code will not work but basically when I set VAR to true I would like to have the first input and when it is set to false I would like the second output, is it possible this way?
I also looked into Define processors | Filebeat Reference [7.14] | Elastic but I did not find any information about conditions with environment variables..
If you have an idea of what I could do that would be great, thanks!
So basically if the path for the second event is set, then it is not empty so you can drop the first event. And if the path is not set then it is equal to empty, the first event is not dropped but the second one won't have a relevant path, so no data to fetch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.