# Http call in logstash filter

**URL:** <https://discuss.elastic.co/t/http-call-in-logstash-filter/141779>\
**Category:** Logstash\
**Created:** [July 26, 2018, 1:24pm UTC](https://discuss.elastic.co/t/http-call-in-logstash-filter/141779 "2018-07-26T13:24:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandra0651](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandra0651/32/30484_2.png) [@chandra0651](https://discuss.elastic.co/u/chandra0651)\
**Post date:** [July 26, 2018, 1:24pm UTC](https://discuss.elastic.co/t/http-call-in-logstash-filter/141779/1 "2018-07-26T13:24:35Z")

</div>

I have a document coming in from logstash input using HTTP poller , in filter section i need to make a http call to other end point with one specific field of document and get the output from end point in filter, at this moment i don't see any Http Filter plugin available for logstash. Any ideas how this can be achieved using logstash.

---

<div class="post-metadata">

**Author:** ![Kurt\_S](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kurt_s/32/17755_2.png) [@Kurt\_S](https://discuss.elastic.co/u/Kurt_S)\
**Post date:** [July 26, 2018, 8:50pm UTC](https://discuss.elastic.co/t/http-call-in-logstash-filter/141779/2 "2018-07-26T20:50:30Z")

</div>

I haven't done it myself but you could try using the ruby filter. In [this blogpost on how to use Ruby in Logstash](https://fabianlee.org/2017/04/24/elk-using-ruby-in-logstash-filters/) there is an example of how to make a webcall. Or [this blogpost](https://opensource.com/article/18/5/building-data-pipeline-elk-stack-ruby) is maybe even better as it looks like it uses the latest version of Ruby.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 27, 2018, 5:21am UTC](https://discuss.elastic.co/t/http-call-in-logstash-filter/141779/3 "2018-07-27T05:21:15Z")

</div>

I do not think there is any filter that does it out of the box. As Kurt suggested it may be possible through the Ruby filter, but be aware that it is likely to be very slow and have a negative impact on throughput.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 24, 2018, 5:21am UTC](https://discuss.elastic.co/t/http-call-in-logstash-filter/141779/4 "2018-08-24T05:21:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.