Wondering if you can help please . We are parsing the CSV using the below code , One of the field (exec) in CSV file can have either one of below values
(T= some integer value |D= some integer value |N=some integer value);
I want to be able to first check which value was add on the field . For example if its (T=5462) then I want logstash to create a new field called Throttling and send the value to elastic search . So elasticserch should see the Throttling as 5462 . If the value is N then should add new field "Network" orif its D then "Disk" and their respective values .
Now seeing one more issue , Logstash is sending all 3 fields value to elasticsearch instead I only want Throttling value to be send to Elasticsearch and ignore all other values .
What code would I need to stop Logstash from sending excuses , excuses_type_letter and excuses_type_value?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.