I need add field, and do value counter, how do it?

[VK345]

@How to hold a state in Logstash?

Hi, I'm trying to apply a state (with a field in ES) to subsequent log lines after seeing [message] =~ "foo" but have not had luck using class variables with the ruby filter (@@classVariable) as described in Keeping global variables in LS?! with logstash 6.0.1. I find that the class variable does not hold the correct value when exploring the data on discover in Kibana. Specifically, I want the state to change when I see [message] =~ "bar" and then hold that value until [message] =~ "foo" is …

1. Thank you for you replay.
2. May be you khow different solve this task?
3. May be you know how not use standart -
   id for example_id:o_TT6X4B7HVNK6zt50Q8

i need

_id:1
_id:2

Not has this data (1,2,3...) in input ?