How to enrich static data in metricbeat events


We have metricbeat installed and it provides the metric events, we would like to enrich the metricbeat events with information which is available in MSSQL DB, can you kindly guide me how to achieve this. I understand logstash will be required, but which filter plugin to be used? If there is a detailed documentation available it will be of great help.

There are two filters that can be used in Logstash to enrich events using external DB lookups, both using JDBC:

  • JDBC Streaming Filter: perform lookups per event against a live database, optionally caching hot entries.
  • JDBC Static Filter: perform lookups per event against a local database, which is periodically refreshed from a live database.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.