How to parse log and do look up where we have multiple values for a particular field

Elastic Stack Logstash
1

Sample log key:
system":[{"systemCode":"abc"},{"systemCode":"def"},{"systemCode":"EOS"}]

Here we also need to do look of values mentioned in systemCode

2

More details please. What's the expected result? What does the lookup table contain?

3

Thank you was able to resolve using ruby filter.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.