How can i read seperated logs only when there is error occured current logs in Logstash?

Hi Team,

I have one use case , where there two log files available in log folder and when there is error occured in1st log file i want to read the 2nd log file and then co-relate the information from the both file and push to ES?

Can i use read file option in filter segment?

need your help here


I don't think you can do it this way, I'm struggling to think of any other option though.
Maybe someone else like Magnus can help though!

No, this isn't possible out of the box. You could still use Logstash but you'd have to build something outside of Logstash (or possibly a custom plugin) to do the rest.