I have two different file types as below
file {
path => "/opt/logsl/test_log.log*"
#start_position => "beginning"
type => "test1"
}
file {
path => "/opt/lookups/testcsv.csv"
start_position => "beginning"
type => "test2"
}
Both types have common field values. I need to match those fields and map the corresponding values.
(similar to outer join)
something like below snippet
if test2.ServerIP_1 == test1.ServerIP
{
add_field => { "city_ip" =>test1. ServerName_1}
}
can anyone help me on this?