How to search concatenated string in the message

Elastic Stack Logstash
1

HI,
In my logstash layer I am receiving the cf loggregator message in json format.
Example:
{ "name" : "abc", "address" : "bangalore}

If I want to search in my logstash grok filter, if "name":"abc" is present in the message then do some specific action.
Can you please tell how can we achieve this?

Here I want to check complete concatenated string: "name":"abc"

THanks in advance.

2

Hi Satya,

You could use a regex conditional.

https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.