How can i read seperated logs only when there is error occured current logs in Logstash?

Elastic Stack Logstash
1

Hi Team,

I have one use case , where there two log files available in log folder and when there is error occured in1st log file i want to read the 2nd log file and then co-relate the information from the both file and push to ES?

Can i use read file option in filter segment?

need your help here

Thanks,
Rohan

2

I don't think you can do it this way, I'm struggling to think of any other option though.
Maybe someone else like Magnus can help though!

3

No, this isn't possible out of the box. You could still use Logstash but you'd have to build something outside of Logstash (or possibly a custom plugin) to do the rest.