How to remove duplicate logs in logstash ?
input {
beats {
port => 5044
tags => "%{[fields][log_type]}"
}
}
}
filter {
fingerprint {
source => "message"
target => "[@metadata][fingerprint]"
method => "SHA256"
}
}
output {
elasticsearch {
hosts => ["192.168.0.90:9200"]
manage_template => false
index => "index-%{+YYYY.MM.dd}"
document_id => "%{[@metadata][fingerprint]}"
user => User
password => Pass
}
}