How to combine two file types in logstash


(nivetha) #1

I have two different file types as below
file {
path => "/opt/logsl/test_log.log*"
#start_position => "beginning"
type => "test1"
}
file {
path => "/opt/lookups/testcsv.csv"
start_position => "beginning"
type => "test2"
}

Both types have common field values. I need to match those fields and map the corresponding values.
(similar to outer join)
something like below snippet
if test2.ServerIP_1 == test1.ServerIP
{
add_field => { "city_ip" =>test1. ServerName_1}
}

can anyone help me on this?


Merging JSON files
(Magnus B├Ąck) #2

Logstash doesn't do joins with its stock plugins.


(system) #3