How to create a rule that compares two dynamic numbers

Elastic Security
,
1

Hi there, I am new to ELK. Currently I have 3 applications talking with each other. I want to check if the message actually gets sent.
When the message gets sent or received, it will print out some logging
For instance:
App A will print out some logging containing “App A” and so on.
I wanted to create a rule that counts the number of messages that containing “App A” /“App B” /“App C” and see if they are equal. However, I couldn’t find a way to do that.
I am using filebeats and log stash for logging. Thanks in advance for your help!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.