Filter unito too large

Hello. Now, in my filter block, there are 480 lines of code, is it possible to separate it?

What do you mean? Separate as in???
Separate files?? Separate filter blocks??

Separate filter blocks, to other file.

And annotate like that
filter{
if tag = "life"
filter by file1.conf
else
filter by file2.conf

Logstash concatenates all the configuration files into a single configuration string. There is no include operation as such (although you could implement it with something like m4). If you want to isolate a set of processing into a different file then pipeline-to-pipeline with a distributor pattern might suit you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.