How to apply if condition on the field of json log

Elastic Stack Logstash
1

I have a log which contains json, i want to apply if condition if log line contains "hai" i need to push data to elasticsearch
@REQ.WS: {"message":"hai","Id":"123"}

2

Something like this.

  if "hai" in [message] {
    elasticsearch { ... }
  }
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.