I have a random log file which contain diff data, I have created fields in it using mutate filter, my if conditions are working but not my else conditions working. log line : 90-50-31: ill ill you are You if [ty] =~ "YOU" or "you" { mutate { gsub => [ "field", "[a-zA-Z]+" , "" ] } } else { mu…

[image] sana1: if [ty] =~ "YOU" or "you" { I would expect to get an error for that. If you want to match either YOU or you then you can use if [ty] =~ /YOU|you/ { If you want it to be case insensitive you can use if [message] =~ /(?i:foo)/ {

Discuss the Elastic Stack

If condition working but not else

Elastic Stack Logstash

sana1 (sana1) April 4, 2019, 10:41am 4

every thing is working fine except any else statement, or give em any else working statement with conf file other than drop filter to get an idea

Topic		Replies	Views
If/Else not working as expected in filter Logstash	3	23357	May 14, 2018
Some trouble with if / else in logstash filter block Logstash	3	1073	July 6, 2017
Conditional IF in logstash's filter Logstash	3	39512	June 14, 2017
Logstash if else Logstash	8	1186	April 27, 2017
Logs that do not match the Filter with IF statement Logstash	6	3883	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

If condition working but not else

Related topics