Grok and Translate logstash

Elastic Stack Logstash
1

Is this not a valid translate? I grok the IP address out of a message and then pass it to the translate plugin.

filter
{

 grok {
   match => { "message" => "%{IP:des_ip}" }
 }

 translate {
     field => "des_ip"
     destination => "ip_map"
     dictionary_path => "/tmp/ipmap.yaml"
 }

}

But I am getting this error. Possibly syntax/formatting, but its not clear:

] Cannot create pipeline {:reason=>"Expected one of #, => at line 57, column 11 (byte 1514) after filter

filter {\n\n grok "}

Line 57 is where filter starts

2

Nevermind, I had a misplaced brace. Sorry thread can be closed.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.