Dynamic fields value matching

Elastic Stack Logstash
1

I want to perform a matching like :

if [type] in ["*UI"] { 
#do something
}

I know its not going to work. I want to do a regrex matching. But is there a way ?

2

If you want to check if type ends with "UI" this'll work:

if [type] =~ /UI$/ {

See https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.