If statment not working event.dataset

Elastic Stack Logstash
1

Hay all

I am treying with logstash to add an tag where ever filebeats pass an nignx.access

   if [event.dataset] == "nginx.access" {
        mutate { add_tag => [ "nginx" ] }

    }

But for some reason they are not being picked up, all other ones i am trying where the feild does not have an "." In it.

What am i missing??

2

OMG :frowning: just after asking this, my next google search found the answer :frowning:

[event.dataset] is showen in logstash as [event][dataset]