I am trying to add special character in logstash config

I am sharing log pattern in below.
2023-02-06T10:10:42.075890912Z stdout F 2023-02-06 10:10:42.075 [DEBUG] - {"logtype":"INFO","request":{"operation":"XXXXXX","trackingID":"abccc","usecase":"xyz"}

I am trying to put condition in pipeline config as below.
if ("logtype":"INFO" in [message] and "operation" in [message]) )

for this i am getting below error.
[2023-02-06T10:23:09,258][ERROR][logstash.agent ] Failed to execute action {:id=>:XXXXXXXXXX, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Expected one of [ \t\r\n], "#", "in", "not ", "==", "!=", "<=", ">=", "<", ">", "=~", "!~", "and", "or", "xor", "nand", ")" at line 195, column 76 (byte 6095) after output \n{\n\n\t\telasticsearch \n\t\t{\n\t\t\thosts => ['${abc}','${def}']\n\t\t\t

Could you please guide me on this?


What does the whole of the elasticsearch output configuration look like?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.