Hello Everyone
I am using http input plugin in logstash I want to filter only POST request from Perticular URL logs should be input and output to elasticsearch how can I achive this.
Give that a read, it'll get you most of the way there. As you will surmise, your conditional will need to be whatever field or array element holds your http method. I think mine are usually just [http][request][method], but you'll want to check your GROK strings to figure out how yours are stored.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.