Hi all, I've a problem when trying to check if a query, done inside the elasticsearch filter plugin, returns me a document. How can i check this situation? Currently I'm using the fields attribute to map old event inside a new one but when I check the value it always fails. Any suggestion? Logstash…

It's correct to test if the query matches or not by adding fields in that way? That should work, but as I said, dump the raw event so you know what happens in both cases. Or maybe it's cleaner to add a tag? That's a matter of taste.

How to check the result of a query to elasticsearch into the filter plugin

Elastic Stack Logstash

system (system) Closed April 9, 2018, 10:47am 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How can i check data of mapping field in elasticsearch with logstash Logstash	6	1127	April 15, 2018
Logstash [elasticsearch plugin not working] Logstash	1	408	December 5, 2017
Elasticsearch Input Filter Returns %{message} Logstash	2	878	March 13, 2017
Logstash filter plugin elasticsearch problem Logstash	1	461	January 8, 2018
How to query elasticsearch and take some fields from old data Logstash	3	7637	March 17, 2017

How to check the result of a query to elasticsearch into the filter plugin

Related topics