Decrypt data before decoding

Elastic Stack Logstash
1

Hi,

I need to fetch file from ftp. Last time I checked, logstash didn't have an input plug-in for ftp. So I'll mount the ftp and logstash will read from file.

The real thing is, can I said to logstash "ok read this file, pass it to openssl with this options (decrypt it), then decode it as a json". Is it doable ?

My question is, I think, about chaining filter (but maybe I am wrong)

In advance thanks, Rémi

2

Perhaps surprisingly I don't think anybody has written a filter that passes events through a child process which is what you'd need here. However, you could use a ruby filter to do that if you're able and willing to write some code.