Hi, I'm using below Ruby filter to find the elapsed time between a start and end event for a given user. The code works fine with the events coming in sequence. But, I have event logs coming from multiple users. I have used the file_ID condition to avoid mismatch between users. But, I'm missing out…

[image] Nani_20: Isn't there a solution in Ruby to have a variable mapped to a specific ID like we have map in aggregate? If so, that would be really helpful Sure, you can maintain a hash of hashes, where the outer hash is keyed by the ID, and the inner hash contains variables. That's what th…

How to create ruby class variables mapped to a given ID?

Elastic Stack Logstash

Badger June 4, 2020, 6:15pm 6

Is it possible an End arrived before a Start? Have you set pipeline.workers 1? Have you disabled java_execution?

Topic		Replies	Views
Keeping global variables in LS?! Logstash	23	17715	July 6, 2017
Persist data between log lines with ruby filter Logstash	5	2157	December 11, 2019
Ruby filter: Ruby exception occurred:undefined local variable or method `map' Logstash	5	2657	May 24, 2018
Field reference in ruby filter Logstash	2	924	September 15, 2017
[Logstash - Ruby Filter] - Execution of the filter occurs only once for cloned or splitted events Logstash	4	708	May 19, 2020

How to create ruby class variables mapped to a given ID?

Related topics