Detect the last character of a field

Elastic Stack Logstash
1

Hello,

I'd like to detect of the last character of a field is "/" so I can know whether I'm accessing a directory or a file. Is it possible?

Thanks for your help,
Noémie

2

Use a regexp conditional.

if [fieldname] =~ /\/$/ {
  ...
}

https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals