I am trying to add special character in logstash config

Elastic Stack Logstash
1

Hi
I am sharing log pattern in below.
2023-02-06T10:10:42.075890912Z stdout F 2023-02-06 10:10:42.075 [DEBUG] - {"logtype":"INFO","request":{"operation":"XXXXXX","trackingID":"abccc","usecase":"xyz"}

I am trying to put condition in pipeline config as below.
if ("logtype":"INFO" in [message] and "operation" in [message]) )

for this i am getting below error.
[2023-02-06T10:23:09,258][ERROR][logstash.agent ] Failed to execute action {:id=>:XXXXXXXXXX, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Expected one of [ \t\r\n], "#", "in", "not ", "==", "!=", "<=", ">=", "<", ">", "=~", "!~", "and", "or", "xor", "nand", ")" at line 195, column 76 (byte 6095) after output \n{\n\n\t\telasticsearch \n\t\t{\n\t\t\thosts => ['${abc}','${def}']\n\t\t\t

Could you please guide me on this?

Thanks

2

What does the whole of the elasticsearch output configuration look like?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.