Efficient way of doing a complex conditional compare

Elastic Stack Logstash
1

I have a range of ranges I want to check an integer field against and I want to do something like if "value" > 100 and "value" < "300" and "value" > "600" and "value" < "700". And repeat that across 6 sets of ranges.

I can just write the above out 6 times, but it seems super inefficient, if anyone has pointers on a better structure it'd be appreciated :slight_smile:

(Also I thought of a translate table, but that seems just as painful given it'll be ~8000 unique values to compare against!)

2

The translate plugin does support regular expressions, so that might shrink the config a bit.

3

Ahh, thanks!

4

How much it shrinks it and how efficient it is I guess depend on what your ranges look like.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.