Dynamic fields value matching

I want to perform a matching like :

if [type] in ["*UI"] { 
#do something

I know its not going to work. I want to do a regrex matching. But is there a way ?

If you want to check if type ends with "UI" this'll work:

if [type] =~ /UI$/ {

See https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.